Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and access certain admin pages.
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.