Stefan ViehbཬK

**Name of the Vulnerable Software and Affected Versions** Cisco embedded devices (affected versions not specified) **Description** The issue allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of hardcoded X.509 certificates and SSH host keys embedded in the firmware from another installation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points ZyXEL P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs ZyXEL PMG5318-B20A GPONs ZyXEL SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways ZyXEL GS1900-8 and GS1900-24 switches ZyXEL C1000Z, Q1000, FR1000Z, and P8702N project models **Description** The issue is related to the use of non-unique X.509 certificates and SSH host keys in various ZyXEL devices. **Recommendations** For all affected devices, consider regenerating unique X.509 certificates and SSH host keys to prevent potential man-in-the-middle attacks or unauthorized access. As a temporary workaround, restrict access to sensitive areas of the network to minimize the risk of exploitation. Avoid using the affected devices for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3 OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G SIP V3 OpenScape Desk Phone IP 35G Eco SIP V3 OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3 OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3 OpenScape Desk Phone IP 35G Eco HFA V3 **Description** The issue is related to the use of non-unique X.509 certificates and SSH host keys in the affected devices. **Recommendations** For OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G SIP V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenScape Desk Phone IP 35G Eco SIP V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenScape Desk Phone IP 35G Eco HFA V3, consider regenerating unique X.509 certificates and SSH host keys.