CVE-2002-1071

ZyXEL Prestige 642R - Denial of Service via TCP SYN-ACK Packet

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-1071. PoCs published by Kistler Ueli.

AI-analyzed exploit summary This script exploits a denial-of-service vulnerability in ZyXEL 642R routers by sending a malformed TCP packet with both ACK and SYN flags set to port 23, crashing the telnet service. The exploit is designed for the RafaleX tool and targets specific ZyXEL router models.

Description

ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with both the SYN and ACK flags set.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kistler Ueli · textdoshardware

https://www.exploit-db.com/exploits/21561

View Code ZIP pw:eip

This script exploits a denial-of-service vulnerability in ZyXEL 642R routers by sending a malformed TCP packet with both ACK and SYN flags set to port 23, crashing the telnet service. The exploit is designed for the RafaleX tool and targets specific ZyXEL router models.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: ZyXEL 642R and Prestige 310 routers (ZyNOS-based)

No auth needed

Prerequisites: Network access to the target router · RafaleX tool

MITRE ATT&CK