Search

Find a vulnerability

Search criteria

    3 vulnerabilities by zonet

    VAR-200412-0769

    Vulnerability from variot - Updated: 2025-04-03 22:33

    The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions. A vulnerability has been reported to affect the implementation of NAT for the ZSR1104WE model Zonet Wireless Router. NAT for the wireless interface on the ZSR1104WE appliance is reported to modify IP data so that on the internal network, the origin address of forwarded traffic is that of the affected appliance. This issue may render the implementation of access controls on an internal host impossible. Zonet Wireless Router is a wireless access device. No detailed vulnerability details are currently available

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-200412-0769",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "zsr1104we wireless router runtime code",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "zonet",
            "version": "2.41"
          },
          {
            "model": "zsr1104we",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "zonet",
            "version": "2.41"
          }
        ],
        "sources": [
          {
            "db": "BID",
            "id": "10225"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          },
          {
            "db": "NVD",
            "id": "CVE-2004-2637"
          }
        ]
      },
      "credits": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/credits#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Jason Wachtel\u203b jwachtel@homelogic.com",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          }
        ],
        "trust": 0.6
      },
      "cve": "CVE-2004-2637",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.4,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 10.0,
                "id": "CVE-2004-2637",
                "impactScore": 4.9,
                "integrityImpact": "PARTIAL",
                "severity": "MEDIUM",
                "trust": 1.1,
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.4,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 10.0,
                "id": "VHN-11065",
                "impactScore": 4.9,
                "integrityImpact": "PARTIAL",
                "severity": "MEDIUM",
                "trust": 0.1,
                "vectorString": "AV:N/AC:L/AU:N/C:N/I:P/A:P",
                "version": "2.0"
              }
            ],
            "cvssV3": [],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2004-2637",
                "trust": 1.0,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-200412-1182",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "VULHUB",
                "id": "VHN-11065",
                "trust": 0.1,
                "value": "MEDIUM"
              },
              {
                "author": "VULMON",
                "id": "CVE-2004-2637",
                "trust": 0.1,
                "value": "MEDIUM"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-11065"
          },
          {
            "db": "VULMON",
            "id": "CVE-2004-2637"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          },
          {
            "db": "NVD",
            "id": "CVE-2004-2637"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions. A vulnerability has been reported to affect the implementation of NAT for the ZSR1104WE model Zonet Wireless Router. NAT for the wireless interface on the ZSR1104WE appliance is reported to modify IP data so that on the internal network, the origin address of forwarded traffic is that of the affected appliance. This issue may render the implementation of access controls on an internal host impossible. Zonet Wireless Router is a wireless access device. No detailed vulnerability details are currently available",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2004-2637"
          },
          {
            "db": "BID",
            "id": "10225"
          },
          {
            "db": "VULHUB",
            "id": "VHN-11065"
          },
          {
            "db": "VULMON",
            "id": "CVE-2004-2637"
          }
        ],
        "trust": 1.35
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "BID",
            "id": "10225",
            "trust": 2.1
          },
          {
            "db": "SECUNIA",
            "id": "11499",
            "trust": 1.8
          },
          {
            "db": "OSVDB",
            "id": "5716",
            "trust": 1.8
          },
          {
            "db": "SECTRACK",
            "id": "1009967",
            "trust": 1.8
          },
          {
            "db": "NVD",
            "id": "CVE-2004-2637",
            "trust": 1.8
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182",
            "trust": 0.7
          },
          {
            "db": "XF",
            "id": "16005",
            "trust": 0.6
          },
          {
            "db": "FULLDISC",
            "id": "20040429 ZONET ZSR1104WE ROUTER PROBLEM",
            "trust": 0.6
          },
          {
            "db": "NSFOCUS",
            "id": "6392",
            "trust": 0.6
          },
          {
            "db": "VULHUB",
            "id": "VHN-11065",
            "trust": 0.1
          },
          {
            "db": "VULMON",
            "id": "CVE-2004-2637",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-11065"
          },
          {
            "db": "VULMON",
            "id": "CVE-2004-2637"
          },
          {
            "db": "BID",
            "id": "10225"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          },
          {
            "db": "NVD",
            "id": "CVE-2004-2637"
          }
        ]
      },
      "id": "VAR-200412-0769",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-11065"
          }
        ],
        "trust": 0.01
      },
      "last_update_date": "2025-04-03T22:33:08.813000Z",
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "NVD-CWE-Other",
            "trust": 1.0
          }
        ],
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2004-2637"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 1.8,
            "url": "http://www.securityfocus.com/bid/10225"
          },
          {
            "trust": 1.8,
            "url": "http://www.osvdb.org/5716"
          },
          {
            "trust": 1.8,
            "url": "http://securitytracker.com/id?1009967"
          },
          {
            "trust": 1.8,
            "url": "http://secunia.com/advisories/11499"
          },
          {
            "trust": 1.2,
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"
          },
          {
            "trust": 1.1,
            "url": "http://marc.info/?l=full-disclosure\u0026m=108324905314026\u0026w=2"
          },
          {
            "trust": 0.6,
            "url": "http://xforce.iss.net/xforce/xfdb/16005"
          },
          {
            "trust": 0.6,
            "url": "http://marc.theaimsgroup.com/?l=full-disclosure\u0026m=108324905314026\u0026w=2"
          },
          {
            "trust": 0.6,
            "url": "http://www.nsfocus.net/vulndb/6392"
          },
          {
            "trust": 0.3,
            "url": "http://www.zonetusa.com/"
          },
          {
            "trust": 0.3,
            "url": "http://www.zonetusa.com/zsr1104we03.htm"
          },
          {
            "trust": 0.1,
            "url": "http://marc.info/?l=full-disclosure\u0026amp;m=108324905314026\u0026amp;w=2"
          },
          {
            "trust": 0.1,
            "url": "https://cwe.mitre.org/data/definitions/.html"
          },
          {
            "trust": 0.1,
            "url": "https://nvd.nist.gov"
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-11065"
          },
          {
            "db": "VULMON",
            "id": "CVE-2004-2637"
          },
          {
            "db": "BID",
            "id": "10225"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          },
          {
            "db": "NVD",
            "id": "CVE-2004-2637"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "VULHUB",
            "id": "VHN-11065"
          },
          {
            "db": "VULMON",
            "id": "CVE-2004-2637"
          },
          {
            "db": "BID",
            "id": "10225"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          },
          {
            "db": "NVD",
            "id": "CVE-2004-2637"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2004-12-31T00:00:00",
            "db": "VULHUB",
            "id": "VHN-11065"
          },
          {
            "date": "2004-12-31T00:00:00",
            "db": "VULMON",
            "id": "CVE-2004-2637"
          },
          {
            "date": "2004-04-23T00:00:00",
            "db": "BID",
            "id": "10225"
          },
          {
            "date": "2004-04-23T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          },
          {
            "date": "2004-12-31T05:00:00",
            "db": "NVD",
            "id": "CVE-2004-2637"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-07-20T00:00:00",
            "db": "VULHUB",
            "id": "VHN-11065"
          },
          {
            "date": "2017-07-20T00:00:00",
            "db": "VULMON",
            "id": "CVE-2004-2637"
          },
          {
            "date": "2004-04-23T00:00:00",
            "db": "BID",
            "id": "10225"
          },
          {
            "date": "2005-12-21T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          },
          {
            "date": "2025-04-03T01:03:51.193000",
            "db": "NVD",
            "id": "CVE-2004-2637"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "remote",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Zonet Wireless Router NAT Implement design flaws",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          }
        ],
        "trust": 0.6
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Design Error",
        "sources": [
          {
            "db": "BID",
            "id": "10225"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-200412-1182"
          }
        ],
        "trust": 0.9
      }
    }

    CVE-2004-2637 (GCVE-0-2004-2637)

    Vulnerability from cvelistv5 – Published: 2005-12-04 22:00 – Updated: 2024-08-08 01:36
    VLAI
    Summary
    The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2261 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/bid/10225 vdb-entryx_refsource_BID
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://securitytracker.com/id?1009967 vdb-entryx_refsource_SECTRACK
    http://www.osvdb.org/5716 vdb-entryx_refsource_OSVDB
    http://secunia.com/advisories/11499 third-party-advisoryx_refsource_SECUNIA
    http://marc.info/?l=full-disclosure&m=10832490531… mailing-listx_refsource_FULLDISC
    Date Public
    2004-04-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-08T01:36:24.587Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "10225",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/10225"
              },
              {
                "name": "zonet-bypass-security(16005)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"
              },
              {
                "name": "1009967",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://securitytracker.com/id?1009967"
              },
              {
                "name": "5716",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/5716"
              },
              {
                "name": "11499",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/11499"
              },
              {
                "name": "20040429 Zonet ZSR1104WE Router problem",
                "tags": [
                  "mailing-list",
                  "x_refsource_FULLDISC",
                  "x_transferred"
                ],
                "url": "http://marc.info/?l=full-disclosure\u0026m=108324905314026\u0026w=2"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2004-04-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "10225",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/10225"
            },
            {
              "name": "zonet-bypass-security(16005)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"
            },
            {
              "name": "1009967",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://securitytracker.com/id?1009967"
            },
            {
              "name": "5716",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/5716"
            },
            {
              "name": "11499",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/11499"
            },
            {
              "name": "20040429 Zonet ZSR1104WE Router problem",
              "tags": [
                "mailing-list",
                "x_refsource_FULLDISC"
              ],
              "url": "http://marc.info/?l=full-disclosure\u0026m=108324905314026\u0026w=2"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2004-2637",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "10225",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/10225"
                },
                {
                  "name": "zonet-bypass-security(16005)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"
                },
                {
                  "name": "1009967",
                  "refsource": "SECTRACK",
                  "url": "http://securitytracker.com/id?1009967"
                },
                {
                  "name": "5716",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/5716"
                },
                {
                  "name": "11499",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/11499"
                },
                {
                  "name": "20040429 Zonet ZSR1104WE Router problem",
                  "refsource": "FULLDISC",
                  "url": "http://marc.info/?l=full-disclosure\u0026m=108324905314026\u0026w=2"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2004-2637",
        "datePublished": "2005-12-04T22:00:00.000Z",
        "dateReserved": "2005-12-04T00:00:00.000Z",
        "dateUpdated": "2024-08-08T01:36:24.587Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2004-2637 (GCVE-0-2004-2637)

    Vulnerability from nvd – Published: 2005-12-04 22:00 – Updated: 2024-08-08 01:36
    VLAI
    Summary
    The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2261 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/bid/10225 vdb-entryx_refsource_BID
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://securitytracker.com/id?1009967 vdb-entryx_refsource_SECTRACK
    http://www.osvdb.org/5716 vdb-entryx_refsource_OSVDB
    http://secunia.com/advisories/11499 third-party-advisoryx_refsource_SECUNIA
    http://marc.info/?l=full-disclosure&m=10832490531… mailing-listx_refsource_FULLDISC
    Date Public
    2004-04-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-08T01:36:24.587Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "10225",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/10225"
              },
              {
                "name": "zonet-bypass-security(16005)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"
              },
              {
                "name": "1009967",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://securitytracker.com/id?1009967"
              },
              {
                "name": "5716",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/5716"
              },
              {
                "name": "11499",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/11499"
              },
              {
                "name": "20040429 Zonet ZSR1104WE Router problem",
                "tags": [
                  "mailing-list",
                  "x_refsource_FULLDISC",
                  "x_transferred"
                ],
                "url": "http://marc.info/?l=full-disclosure\u0026m=108324905314026\u0026w=2"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2004-04-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "10225",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/10225"
            },
            {
              "name": "zonet-bypass-security(16005)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"
            },
            {
              "name": "1009967",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://securitytracker.com/id?1009967"
            },
            {
              "name": "5716",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/5716"
            },
            {
              "name": "11499",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/11499"
            },
            {
              "name": "20040429 Zonet ZSR1104WE Router problem",
              "tags": [
                "mailing-list",
                "x_refsource_FULLDISC"
              ],
              "url": "http://marc.info/?l=full-disclosure\u0026m=108324905314026\u0026w=2"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2004-2637",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "10225",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/10225"
                },
                {
                  "name": "zonet-bypass-security(16005)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"
                },
                {
                  "name": "1009967",
                  "refsource": "SECTRACK",
                  "url": "http://securitytracker.com/id?1009967"
                },
                {
                  "name": "5716",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/5716"
                },
                {
                  "name": "11499",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/11499"
                },
                {
                  "name": "20040429 Zonet ZSR1104WE Router problem",
                  "refsource": "FULLDISC",
                  "url": "http://marc.info/?l=full-disclosure\u0026m=108324905314026\u0026w=2"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2004-2637",
        "datePublished": "2005-12-04T22:00:00.000Z",
        "dateReserved": "2005-12-04T00:00:00.000Z",
        "dateUpdated": "2024-08-08T01:36:24.587Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }