Lucene search

K
cve[email protected]CVE-2008-1522
HistoryMar 26, 2008 - 10:44 a.m.

CVE-2008-1522

2008-03-2610:44:00
CWE-16
web.nvd.nist.gov
18
cve-2008-1522
zyxel prestige
routers
default passwords
remote access
vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.6%

ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), have (1) “user” as their default password for the “user” account and (2) “1234” as their default password for the “admin” account, which makes it easier for remote attackers to obtain access.

Affected configurations

NVD
Node
zyxelprestige_660Matchh-d1
OR
zyxelprestige_660Matchh-d3
OR
zyxelprestige_661Matchhw-d1
OR
zyxelzynosMatch3.40agd.2
OR
zyxelzynosMatch3.40agl.3
OR
zyxelzynosMatch3.40ahq.0
OR
zyxelzynosMatch3.40ahq.3
OR
zyxelzynosMatch3.40ahz.0
OR
zyxelzynosMatch3.40atm.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.6%

Related for CVE-2008-1522