Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZyXEL ZyWALL Quagga及Zebra进程默认帐号口令漏洞
Vulnerability Description
Zywall是一款由Zyxel开发和维护的硬件防火墙。 Zyxel的Quagga和Zebra路由守护程序访问认证的实现上存在漏洞,远程攻击者可能利用此漏洞获取非授权访问。 即使已经更改了设备的口令,仍没有更改登录到Quagga/Zebra守护程序所需的口令。这些守护程序运行在TCP 2601、2602(Quagga/RIP)和2604(Quagga/OSPF)端口上。攻击者可以使用默认的口令zebra登录到Quagga/Zebra服务,查看并操控设备的路由信息。
CVSS Information
N/A
Vulnerability Type
N/A