Zyxel P-660HW-T1 (v3) Wireless Router CSRF Vulnerabilities: Admin Authentication Hijacking for WiFi Password and SSID Changes

CVE-2014-4162

Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentication of administrators for requests that change the (1) wifi password or (2) SSID via a request to Forms/WLAN_General_1.

Learn more about our Wireless Penetration Test.