ZLAN Information Technology Co. ZLAN5143D Authentication Bypass Vulnerability

A vulnerability exists in ZLAN Information Technology Co. ZLAN5143D version 1.600, allowing authentication to be bypassed by directly accessing internal URLs. This could lead to unauthorized actions, such as resetting the device password, without the need for authentication.

Impact

Exploitation of this vulnerability could result in an attacker bypassing authentication or resetting the device password.

Remediation

ZLAN Information Technology Co. did not respond to CISA's attempts at coordination. Users of ZLAN5143D devices are encouraged to contact ZLAN and keep their systems up to date.