CVE-2008-1527

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

Design/Logic Flaw

ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to gain privileges by accessing administrative URIs, as demonstrated by rpSysAdmin.html...

CVE-2008-1522

ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, have 1 "user" as their default password for the "user" account and 2 "1234" as their default password for the "admin" account, which makes it easier for remote attackers to obtain access...

CVE-2008-1524

The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has "public" as its default community for both 1 read and 2 write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by readin...

Default configuration

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address...

Design/Logic Flaw

The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has "public" as its default community for both 1 read and 2 write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by readin...

Design/Logic Flaw

ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods...

CVE-2008-1525

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address...

CVE-2008-1523

ZyXEL Prestige routers P-660, P-661, and P-662 with firmware 3.40(AGD.2)–3.40(AHQ.3) expose a vulnerability where remote authenticated users can read HTML source by directly requesting WAN.html, wzPPPOE.html, and rpDyDNS.html, potentially obtaining ISP and Dynamic DNS credentials. This is documen...

CVE-2008-1527

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

CVE-2008-1521

ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to gain privileges by accessing administrative URIs, as demonstrated by rpSysAdmin.html...

CVE-2008-1528

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for 1 RemMagSNMP.html, which...

CVE-2008-1524

The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has "public" as its default community for both 1 read and 2 write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by readin...

CVE-2008-1525

The CVE-2008-1525 entry affects ZyXEL Prestige routers (P-660/P-661) with firmware 3.40(AGD.2)–3.40(AHQ.3). The issue is a default SNMP configuration where Trusted Host is 0.0.0.0, enabling remote attackers to send SNMP requests from any source IP address. The provided documents do not specify an...

CVE-2008-1523

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for 1 WAN.html, 2 wzPPPOE.html, and 3 rpDyDNS.html, and then reading the HTML source...

CVE-2008-1522

ZyXEL Prestige routers (P-660, P-661) with firmware 3.40(AGD.2)–3.40(AHQ.3) are documented as vulnerable due to default credentials: default user password for the user account and default 1234 for the admin account. This credential pairing could allow remote access to affected devices. The Connec...

CVE-2008-1526

ZyXEL Prestige routers P-660, P-661, and P-662 with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3) compute MD5 password hashes without a salt, making passwords easier to crack. Affected components are the router firmware password hashing. The exploitation details are not provided in the d...

CVE-2008-1521

The CVE-2008-1521 issue affects ZyXEL Prestige routers (P-660 and P-661) with firmware 3.40(AGD.2)–3.40(AHQ.3). The vulnerability arises from remote authentication-enabled access to administrative URIs (e.g., rpSysAdmin.html), enabling privilege escalation. Documented impact is privilege gain for...

CVE-2008-1528

Affected: ZyXEL Prestige routers P-660, P-661, P-662 with firmware 3.40(AGD.2)–3.40(AHQ.3). Issue: remote authenticated users can read HTML sources via direct HTTP requests to disclose credentials, e.g., RemMagSNMP.html reveals SNMP communities and WLAN.html reveals WEP keys. Root cause: inadequa...

CVE-2008-1525

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address...