124 matches found
CVE-2008-1521
The CVE-2008-1521 issue affects ZyXEL Prestige routers (P-660 and P-661) with firmware 3.40(AGD.2)–3.40(AHQ.3). The vulnerability arises from remote authentication-enabled access to administrative URIs (e.g., rpSysAdmin.html), enabling privilege escalation. Documented impact is privilege gain for...
CVE-2008-1527
CVE-2008-1527 affects ZyXEL Prestige routers P-660, P-661, and P-662 with firmware versions 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3). The issue arises from HTTP authentication using a hash in the hiddenPassword field, enabling remote attackers to gain access via a replay attack. Reported imp...
CVE-2008-1528
Affected: ZyXEL Prestige routers P-660, P-661, P-662 with firmware 3.40(AGD.2)–3.40(AHQ.3). Issue: remote authenticated users can read HTML sources via direct HTTP requests to disclose credentials, e.g., RemMagSNMP.html reveals SNMP communities and WLAN.html reveals WEP keys. Root cause: inadequa...
CVE-2008-1522
ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, have 1 "user" as their default password for the "user" account and 2 "1234" as their default password for the "admin" account, which makes it easier for remote attackers to obtain access...
CVE-2008-1524
Vulnerability: CVE-2008-1524 affects ZyXEL Prestige routers (P-660, P-661) with firmware 3.40(AGD.2)–3.40(AHQ.3). The SNMP service uses default community names: read and write access are both set to "public", enabling remote administrators actions via SNMP. Documented implications include reading...
PT-2008-3085 · Zyxel · Zyxel Prestige
Name of the Vulnerable Software and Affected Versions: ZyXEL Prestige routers versions 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3 Description: The issue is related to the calculation of an MD5 password hash without using a salt, making it easier for attackers to crack passwords. Recommendations: For...
ZyXel Prestige routers multiple security vulnerabilities
Crossite scripting, crossite request spoofing, privilege escalation, unauthorized SNMP access, information leak...
Unfixed XSS vulnerability at www.prestigeajans.com
Security researcher BackDoor, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.prestigeajans.com, which at the time of submission ranked 3792445 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...
CVE-2006-3929
Cross-site scripting XSS vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40PT.0b32 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the a parameter...
CVE-2006-3929
Affected product: Zyxel Prestige 660H-61 ADSL Router, firmware 3.40(PT.0)b32. Vulnerable component: Forms/rpSysAdmin script. Root cause: XSS via hex-encoded values in parameter a due to improper sanitization. Impact: remote attacker can execute arbitrary script in the victim’s browser (cross-site...
CVE-2006-3929
Cross-site scripting XSS vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40PT.0b32 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the a parameter...
Zyxel660H-61.txt
Zyxel Prestige 660H-61 Cross-Site Scripting Tested on Zyxel Prestige 660H-61 ZyNOS F/W Version: V3.40PT.0b32 | 1/28/2005 Standard:NORMAL Discovered by: José Ramón Palanco: jose.palancoateazeldot.es http://www.eazel.es Description: Zyxel Prestige 660H-61 ADSL Router is vulnerable to a security...
ZYXEL Prestige 660H-61 ADSL Router - Cross-Site Scripting
ZYXEL Prestige 660H-61 ADSL Router - Cross-Site Scripting source: https://www.securityfocus.com/bid/19180/info The Zyxel Prestige 660H-61 ADSL Router is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
Zyxel Prestige 660H-61 Cross-Site Scripting
Zyxel Prestige 660H-61 Cross-Site Scripting Tested on Zyxel Prestige 660H-61 ZyNOS F/W Version: V3.40PT.0b32 | 1/28/2005 Standard:NORMAL Discovered by: Josй Ramуn Palanco: jose.palancoateazeldot.es http://www.eazel.es Description: Zyxel Prestige 660H-61 ADSL Router is vulnerable to a security...
Zyxel Prestige 660H-61 crossite scripting
No description provided...
ZYXEL Prestige 660H-61 ADSL Router - Cross-Site Scripting
source: https://www.securityfocus.com/bid/19180/info The Zyxel Prestige 660H-61 ADSL Router is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
ZyxelIPHandling.txt
|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...
CVE-2005-1717
The CVE-2005-1717 entry concerns ZyXEL Prestige 650R-31 routers running ZyNOS FW v3.40(KO.1). Affected component: the device’s IP stack handling of fragmented packets. Root cause: crafted fragmented IP packets that lead to denial of service via sustained CPU usage and network loss. Impact: remote...