PT-2008-3081 · Zyxel · Zyxel Prestige

Published 2008-03-26 · Updated 2018-10-11 · CVE-2008-1522

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige routers, including P-660 and P-661 models, versions 3.40(AGD.2) through 3.40(AHQ.3)

Description The issue concerns default passwords for the user and admin accounts. The default password for the user account is user, and for the admin account, it is 1234. This makes it easier for remote attackers to gain access.

Recommendations For versions 3.40(AGD.2) through 3.40(AHQ.3), change the default passwords for the user and admin accounts to strong, unique passwords to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2008-1522

Affected Products

Zyxel Prestige

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-1522 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41508 · Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• http://gnucitizen.org/projects/router-hacking-challenge · Note
• http://procheckup.com/Hacking_ZyXEL_Gateways.pdf · Note