ID CVE-2008-1529
Summary ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods.
References
Vulnerable Configurations
  • cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*
    cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*
  • cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*
    cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*
  • cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*
    cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*
  • cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*
    cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*
  • cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*
    cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*
  • cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*
    cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*
  • cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*
    cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*
  • cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*
    cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*
  • cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*
    cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-10-2018 - 20:35)
Impact:
Exploitability:
CWE CWE-255
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bugtraq 20080301 The Router Hacking Challenge is Over!
misc
xf zyxelprestige-password-weak-security(41513)
Last major update 11-10-2018 - 20:35
Published 26-03-2008 - 10:44
Last modified 11-10-2018 - 20:35
Back to Top