CVE-2008-1259

2008-03-1017:00:00

mitre

www.cve.org

AI Score

6.8

Confidence

Low

EPSS

0.006

Percentile

79.2%

JSON

The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes.