Tozed ZLT M30S and ZLT M30S PRO Web Interface Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the web interface of the Tozed ZLT M30S and ZLT M30S PRO routers, specifically in versions 1.47 and 3.09.06. The issue arises in an unknown function of the file '/reqproc/proc_post', where the 'goformId' parameter can be manipulated with the value 'REBOOT_DEVICE' to trigger a system reboot. This vulnerability can be exploited by an unauthenticated attacker within the local network, causing a disruption of service.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the device to become unresponsive or unavailable.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/reqproc/proc_post' endpoint with the 'goformId' parameter set to 'REBOOT_DEVICE'. This can be done using tools like curl, from within the local network.