Problem
At the moment the default web admin interface is using the same interface as the default user interface port 80/443. With this there will always be a security risk and with the recent CVE that makes cross-site scripting (XSS) attack possible you are forced to roll out a service pack. If the CVE was never reported this would have been a serious gap in security. And there is also no guarantee there will be no future XSS possible.
Suggestion
The only way to prevent this is to separate the web admin interface from the default interface port 80/443. With that admins are able to setup their load balancers and firewalls differently for the web admin interface and shield the web admin interface from a user-LAN.
Hi Bart,
We agree is good to have them separated. We can make it configurable.
Thanks