PT-2008-3088 · Zyxel · Zyxel Prestige

Published 2008-03-26 · Updated 2018-10-11 · CVE-2008-1529

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige routers (affected versions not specified)

Description The issue concerns a security weakness where the minimum password length for the admin account is too small, making it easier for remote attackers to guess passwords via brute force methods.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2008-1529

Affected Products

Zyxel Prestige

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-1529 · Security Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• http://gnucitizen.org/projects/router-hacking-challenge · Note
• http://procheckup.com/Hacking_ZyXEL_Gateways.pdf · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41513 · Note