PT-2008-3081 · Zyxel · Zyxel Prestige

Publicado 2008-03-26 · Atualizado 2018-10-11 · CVE-2008-1522

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige routers, including P-660 and P-661 models, versions 3.40(AGD.2) through 3.40(AHQ.3)

Description The issue concerns default passwords for the user and admin accounts. The default password for the user account is user, and for the admin account, it is 1234. This makes it easier for remote attackers to gain access.

Recommendations For versions 3.40(AGD.2) through 3.40(AHQ.3), change the default passwords for the user and admin accounts to strong, unique passwords to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2008-1522

Produtos afetados

Zyxel Prestige

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/41508 · Nota
• http://securityfocus.com/archive/1/489009/100/0/threaded · Nota
• http://gnucitizen.org/projects/router-hacking-challenge · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1522 · Nota de Segurança
• http://procheckup.com/Hacking_ZyXEL_Gateways.pdf · Nota