CVE-2008-1256

The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access...

CVE-2008-1254

Multiple cross-site request forgery CSRF vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to 1 change DNS servers and 2 add keywords to the "bannedlist" via unspecified vectors...

CVE-2008-1257

Cross-site scripting XSS vulnerability in Forms/DiagGeneral2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter...

CVE-2008-1261

The Zyxel P-2602HW-D1A router with 3.40AJZ.1 firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI...

CVE-2008-1255

The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user...

CVE-2008-1256

The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access...

CVE-2008-1257

Cross-site scripting XSS vulnerability in Forms/DiagGeneral2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter...

CVE-2008-1254

CVE-2008-1254 concerns the ZyXEL P-660HW series router and describes multiple CSRF vulnerabilities. The affected functionality is the web management interface, where remote attackers could (via unspecified vectors) change DNS servers and add keywords to the ban list. The entry provides a CVSS v2 ...

CVE-2008-1255

The CVE-2008-1255 entry concerns the ZyXEL P-660HW series router. The vulnerability arises because the device maintains authentication state by source IP, allowing a remote attacker to bypass authentication by initiating a session from the IP address of a previously authenticated user. This affec...

CVE-2008-1256

Affected product : ZyXEL P-660HW series routers. Vulnerability : default password “admin” enables remote attackers to gain administrative access. Root cause / detail : the vulnerability stems from using a default credential, allowing unauthenticated remote administration. Impact : total compromis...

CVE-2008-1257

CVE-2008-1257 is a cross-site scripting (XSS) vulnerability affecting ZyXEL P-660HW series routers, exploitable via the PingIPAddr parameter under Forms/DiagGeneral_2. Attackers can inject arbitrary web script or HTML in the router’s web interface. According to the connected NVD entry, the affect...

CVE-2008-1260

The CVE-2008-1260 entry affects the Zyxel P-2602HW-D1A router running firmware 3.40(AJZ.1). The described vulnerabilities are CSRF flaws that let remote attackers (no authentication required) influence the device: (1) expose the admin web server on WAN via WWWAccessInterface in Forms/RemMagWWW_1,...

CVE-2008-1261

The CVE-2008-1261 entry affects the Zyxel P-2602HW-D1A router (firmware 3.40(AJZ.1)). The vulnerability arises because the device’s admin page responses differ based on whether a user is logged in, enabling remote attackers to learn the current login status by requesting an arbitrary admin URI. T...

CVE-2008-1259: Improper Authentication

The Zyxel P-2602HW-D1A router with 3.40AJZ.1 firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes...

CVE-2008-1260: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40AJZ.1 firmware allow remote attackers to 1 make the admin web server available on the Internet WAN interface via the WWWAccessInterface parameter to Forms/RemMagWWW1 or 2 change the IP whitelisting...

CVE-2008-1254: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to 1 change DNS servers and 2 add keywords to the "bannedlist" via unspecified vectors...

CVE-2008-1257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Forms/DiagGeneral2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter...

CVE-2008-1255: Undefined Security Weakness

The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user...

CVE-2008-1256: Undefined Security Weakness

The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access...

CVE-2008-1261: Undefined Security Weakness

The Zyxel P-2602HW-D1A router with 3.40AJZ.1 firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI...