Lucene search

K
cve[email protected]CVE-2008-1254
HistoryMar 10, 2008 - 5:44 p.m.

CVE-2008-1254

2008-03-1017:44:00
CWE-352
web.nvd.nist.gov
27
zyxel
p-660hw
csrf
vulnerability
router
dns
bannedlist
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to (1) change DNS servers and (2) add keywords to the “bannedlist” via unspecified vectors.

Affected configurations

NVD
Node
zyxelp-660hw
CPENameOperatorVersion
zyxel:p-660hwzyxel p-660hweq*

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

Related for CVE-2008-1254