PT-2008-2851 · Zyxel · Zyxel P-2602Hw-D1A

Published 2008-03-10 · Updated 2018-10-11 · CVE-2008-1259

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zyxel P-2602HW-D1A version 3.40(AJZ.1)

Description The issue allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes, due to the router maintaining authentication state by IP address.

Recommendations For Zyxel P-2602HW-D1A version 3.40(AJZ.1), consider restricting access to the router's web interface to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the number of IP addresses that can access the router's interface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-1259

Affected Products

Zyxel P-2602Hw-D1A

References · 4

• 🔥 http://gnucitizen.org/projects/router-hacking-challenge · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1259 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41112 · Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note