PT-2008-3087 · Zyxel · Zyxel Prestige

Published 2008-03-26 · Updated 2018-10-11 · CVE-2008-1528

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige routers, including P-660, P-661, and P-662 models, versions 3.40(AGD.2) through 3.40(AHQ.3)

Description The issue allows remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source. This can be demonstrated by making a request for (1) "RemMagSNMP.html", which discloses SNMP communities, or (2) "WLAN.html", which discloses WEP keys.

Recommendations For versions 3.40(AGD.2) through 3.40(AHQ.3), consider restricting access to the affected HTTP endpoints, such as "RemMagSNMP.html" and "WLAN.html", until a patch is available. As a temporary workaround, limit the disclosure of sensitive information, like SNMP communities and WEP keys, by restricting access to these endpoints.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-1528

Affected Products

Zyxel Prestige

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-1528 · Security Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• http://gnucitizen.org/projects/router-hacking-challenge · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41511 · Note
• http://procheckup.com/Hacking_ZyXEL_Gateways.pdf · Note