PT-2008-3084 · Zyxel · Zyxel Prestige

Publicado 2008-03-26 · Atualizado 2018-10-11 · CVE-2008-1525

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige routers, including P-660 and P-661 models, versions 3.40(AGD.2) through 3.40(AHQ.3)

Description The default SNMP configuration has a Trusted Host value of 0.0.0.0, allowing remote attackers to send SNMP requests from any source IP address.

Recommendations For versions 3.40(AGD.2) through 3.40(AHQ.3), change the Trusted Host value to a specific IP address to restrict access to legitimate sources.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2008-1525

Produtos afetados

Zyxel Prestige

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-1525 · Nota de Segurança
• http://securityfocus.com/archive/1/489009/100/0/threaded · Nota
• http://gnucitizen.org/projects/router-hacking-challenge · Nota
• http://procheckup.com/Hacking_ZyXEL_Gateways.pdf · Nota