PT-2019-18285 · Zyxel · Zyxel P-660Hn-T1 V2

Onur Onur · Publicado 2019-05-31 · Atualizado 2019-06-03 · CVE-2019-6725

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HN-T1 V2 version 2.00(AAKK.3)

Description The issue allows unauthorized access to the rpWLANRedirect.asp ASP page without authentication. By accessing this page, an attacker can obtain the admin user's password by viewing the HTML source code and subsequently access the modem's interface with admin privileges.

Recommendations For ZyXEL P-660HN-T1 V2 version 2.00(AAKK.3), consider restricting access to the rpWLANRedirect.asp page until a fix is available, and change the admin password as a precautionary measure.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-6725

Produtos afetados

Zyxel P-660Hn-T1 V2

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-6725 · Aviso do Fabricante
• https://seclists.org/bugtraq/2019/May/78 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-6725 · Nota de Segurança