PT-2008-3080 · Zyxel · Zyxel Prestige

Published 2008-03-26 · Updated 2018-10-11 · CVE-2008-1521

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige routers, including P-660 and P-661 models, versions 3.40(AGD.2) through 3.40(AHQ.3)

Description The issue allows remote authenticated users to gain privileges by accessing certain administrative URIs, such as 'rpSysAdmin.html'.

Recommendations For versions 3.40(AGD.2) through 3.40(AHQ.3), consider restricting access to administrative URIs, such as 'rpSysAdmin.html', to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-1521

Affected Products

Zyxel Prestige

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-1521 · Security Note
• http://procheckup.com/Hacking_ZyXEL_Gateways.pdf · Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• http://gnucitizen.org/projects/router-hacking-challenge · Note