CVEvulnerability
CVE-2008-1522
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-16
Description
ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), have (1) "user" as their default password for the "user" account and (2) "1234" as their default password for the "admin" account, which makes it easier for remote attackers to obtain access.
Affected configurations
• zyxel prestige 660 h-d1
• zyxel prestige 660 h-d3
• zyxel prestige 661 hw-d1
• zyxel zynos 3.40
Related
Weakness · not in database (1)
References
- http://www.gnucitizen.org/projects/router-hacking-challenge/ www.gnucitizen.org
- http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf www.procheckup.com
- http://www.securityfocus.com/archive/1/489009/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41508 exchange.xforce.ibmcloud.com
- http://www.gnucitizen.org/projects/router-hacking-challenge/ www.gnucitizen.org
- http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf www.procheckup.com
- http://www.securityfocus.com/archive/1/489009/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41508 exchange.xforce.ibmcloud.com