PT-2008-2846 · Zyxel · Zyxel P-660Hw

Published 2008-03-10 · Updated 2018-10-11 · CVE-2008-1254

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW series router (affected versions not specified)

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to perform certain actions, including changing DNS servers and adding keywords to the "bannedlist". The exact vectors used for the attack are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2008-1254

Affected Products

Zyxel P-660Hw

References · 4

• 🔥 http://gnucitizen.org/projects/router-hacking-challenge · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1254 · Security Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41111 · Note