Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WANs MAC address.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rt311 | Netgear | * | * |
| Rt314 | Netgear | * | * |
| Prestige | Zyxel | 310 (including) | 310 (including) |
| Prestige | Zyxel | 314 (including) | 314 (including) |
| Prestige | Zyxel | 324 (including) | 324 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=110720465527599\u0026w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20609
- http://marc.info/?l=bugtraq\u0026m=110720465527599\u0026w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20609