CVE-2018-1164CWE-306

This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00(AWG.3)D5

published February 21, 2018

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

⚠️ Remote attackers can turn your ZyXEL DSL router into a paperweight with a simple command! 🚨 Think of it like a hotel that forgot to lock the gym door. Anyone can just waltz in and start flipping switches, causing chaos with no one to stop them! If exploited, this vulnerability allows attackers to reboot the router and disrupt your internet connection. Imagine your online meetings being interrupted or your smart home devices going offline—absolutely devastating!

Put simply

Think of it like a hotel that forgot to lock the gym door. Anyone can just waltz in and start flipping switches, causing chaos with no one to stop them! The flaw exists in multiple CGI endpoints where improper access controls permit access to essential functions without any authentication, making it alarmingly easy for attackers to exploit.

What to do

If exploited, this vulnerability allows attackers to reboot the router and disrupt your internet connection. Imagine your online meetings being interrupted or your smart home devices going offline—absolutely devastating! To safeguard your network, immediately check for firmware updates for your ZyXEL P-870H-51 and patch to the latest version. Additionally, consider disabling any unnecessary CGI services to reduce exposure. 🛡️ You can handle this! Patch your devices, and you'll keep your internet fortress secure! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03960 · 90.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2018-02-21T14:00Z
EPSS history
Timeline
  • 21 FEB 14:00Z
    This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00(AWG.3)D5
    cvelistv5