Lucene search

K
nvd[email protected]NVD:CVE-2008-1525
HistoryMar 26, 2008 - 10:44 a.m.

CVE-2008-1525

2008-03-2610:44:00
CWE-16
web.nvd.nist.gov
6

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.004

Percentile

75.0%

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address.

Affected configurations

Nvd
Node
zyxelprestige_660Matchh-d1
OR
zyxelprestige_660Matchh-d3
OR
zyxelprestige_661Matchhw-d1
OR
zyxelzynosMatch3.40agd.2
OR
zyxelzynosMatch3.40agl.3
OR
zyxelzynosMatch3.40ahq.0
OR
zyxelzynosMatch3.40ahq.3
OR
zyxelzynosMatch3.40ahz.0
OR
zyxelzynosMatch3.40atm.0
VendorProductVersionCPE
zyxelprestige_660h-d1cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*
zyxelprestige_660h-d3cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*
zyxelprestige_661hw-d1cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*
zyxelzynos3.40cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*
zyxelzynos3.40cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*
zyxelzynos3.40cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*
zyxelzynos3.40cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*
zyxelzynos3.40cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*
zyxelzynos3.40cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.004

Percentile

75.0%

Related for NVD:CVE-2008-1525