PT-2008-3084 · Zyxel · Zyxel Prestige

Published 2008-03-26 · Updated 2018-10-11 · CVE-2008-1525

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige routers, including P-660 and P-661 models, versions 3.40(AGD.2) through 3.40(AHQ.3)

Description The default SNMP configuration has a Trusted Host value of 0.0.0.0, allowing remote attackers to send SNMP requests from any source IP address.

Recommendations For versions 3.40(AGD.2) through 3.40(AHQ.3), change the Trusted Host value to a specific IP address to restrict access to legitimate sources.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2008-1525

Affected Products

Zyxel Prestige

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-1525 · Security Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• http://gnucitizen.org/projects/router-hacking-challenge · Note
• http://procheckup.com/Hacking_ZyXEL_Gateways.pdf · Note