VULNERABILITY INTELLIGENCE

CVE-2007-6730

CVSS score9.3 HIGH
EPSS probability1.03%
CISA KEVNot currently listed
Published2009-09-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote router management via goform/formRmtMgt or (2) modify the administrator password via goform/formPasswordSetup.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references