PT-2008-3080 · Zyxel · Zyxel Prestige

Publicado 2008-03-26 · Atualizado 2018-10-11 · CVE-2008-1521

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige routers, including P-660 and P-661 models, versions 3.40(AGD.2) through 3.40(AHQ.3)

Description The issue allows remote authenticated users to gain privileges by accessing certain administrative URIs, such as 'rpSysAdmin.html'.

Recommendations For versions 3.40(AGD.2) through 3.40(AHQ.3), consider restricting access to administrative URIs, such as 'rpSysAdmin.html', to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1521

Produtos afetados

Zyxel Prestige

Referências · 4

• http://procheckup.com/Hacking_ZyXEL_Gateways.pdf · Nota
• http://securityfocus.com/archive/1/489009/100/0/threaded · Nota
• http://gnucitizen.org/projects/router-hacking-challenge · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1521 · Nota de Segurança