EUVD-2015-5960

Malware in sbrugna...

Weak password vulnerability in P-660HW-T1 of Zongqin Communication Equipment Trading (Shanghai) Co.

P-660HW-T1 is a wireless router product of Zongqin Communication Equipment Trading Shanghai Co. The P-660HW-T1 has a weak password vulnerability that can be exploited by an attacker to gain access to the P-660HW-T1 v3 via a An attacker can use this vulnerability to gain access to sensitive...

CVE-2015-6017

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

CVE-2015-6017

CVE-2015-6017 refers to multiple cross-site scripting (XSS) vulnerabilities in the ZyXEL P-660HW-T1 v2 router running ZyNOS firmware 3.40(AXH.0). The issue resides in the web form at /Forms/rpAuth_1, where an attacker can craft requests that inject arbitrary script or HTML via the LoginPassword o...

CVE-2015-6017

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

CVE-2015-6016

CVE-2015-6016 affects ZyXEL routers: P-660HW-T1 v2 with ZyNOS 3.40(AXH.0), PMG5318-B20A (firmware 1.00AANC0b5), and NBG-418N, where the admin account uses a default password of 1234 . This enables remoting attackers to obtain administrative access via unspecified vectors. The connected sources co...

PT-2015-2964

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 versions 3.40AXH.0 ZyXEL PMG5318-B20A versions 1.00AANC0b5 ZyXEL NBG-418N affected versions not specified Description The issue is related to the use of a default password for the administrator account in the firmware of certa...

CVE-2015-6016: Undefined Security Weakness

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0, PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors...

CVE-2015-6017: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

PT-2015-7116

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 version 3.40AXH.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the LoginPassword or hiddenPassword parameters in the Forms/rpAuth 1 module. Recommendations For ZyXEL P-660HW-T1 versi...

Multiple ZyXEL Router Credential Management Vulnerabilities

ZyXEL NBG-418N, PMG5318-B20A and P-660HW-T1 are all products of ZyXEL Technology Corporation.NBG-418N and P-660HW-T1 are wireless broadband routers; PMG5318-B20A is a wireless switch product. A security vulnerability exists in multiple ZyXEL routers. A remote attacker could exploit the...

Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerability

No description provided by source. Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router Tested on: Zyxel P-660HW-...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...

CVE-2014-4162

The CVE-2014-4162 issue affects Zyxel P-660HW-T1 (v3) wireless routers. The documented vulnerability is multiple Cross-Site Request Forgery (CSRF) flaws in the device’s web interface (Forms/WLAN_General_1) that allow remote attackers to hijack administrator authentication and perform changes to (...

PT-2014-5713

Name of the Vulnerable Software and Affected Versions Zyxel P-660HW-T1 version v3 Description The issue affects the Zyxel P-660HW-T1 wireless router, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers to hijack the authentication of...

CVE-2014-4162: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...

Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router...

Zyxel P-660HW-T1 Cross Site Request Forgery

Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router Tested on: Zyxel P-660HW-T1 v3 Wireless Router Patch/ Fix:...

ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery

ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless...