Zyxel VMG1312-B10D - Login Detection

What is the "Zyxel VMG1312-B10D - Login Detection?" module?

The "Zyxel VMG1312-B10D - Login Detection" module is designed to detect misconfigurations related to the Zyxel VMG1312-B10D modem/router. It targets the web-based configurator of the device and checks for a specific login page. This module has an informative severity level and was authored by princechaddha.

Impact

This module helps identify potential login vulnerabilities in the Zyxel VMG1312-B10D device. By detecting misconfigurations, it can prevent unauthorized access to the device's web-based configurator and protect against potential security breaches.

How does the module work?

The module works by sending HTTP requests to the target device and analyzing the responses. It uses specific matching conditions to determine if the device is vulnerable to login-related issues. One of the matching conditions checks for the presence of the login page with the text "Welcome to the Web-Based Configurator" in the body of the response. Additionally, it verifies that the HTTP status code is not 401 (Unauthorized).

Here is an example of an HTTP request that the module may send:

GET / HTTP/1.1
Host: [target IP address]
User-Agent: Vidoc-Scanner

The module then evaluates the response based on the defined matching conditions to determine if the Zyxel VMG1312-B10D device is potentially misconfigured or vulnerable.