CVE-2008-1522 — Zyxel Prestige 660 vulnerability

CWE-163 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.6%
top 30.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Zyxel Prestige 660Zyxel Prestige 661Zyxel Zynos
Timeline
PublishedMar 26
Latest updateMay 1

Description

ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), have (1) "user" as their default password for the "user" account and (2) "1234" as their default password for the "admin" account, which makes it easier for remote attackers to obtain access.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

▶NVDzyxel/prestige_660h-d1, h-d3+1
▶NVDzyxel/zynos3.40

🔴Vulnerability Details

2
GHSA
GHSA-m9qp-9j2g-69h2: ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3↗2022-05-01
▶
CVEList
CVE-2008-1522: ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3↗2008-03-26
▶
CVE-2008-1522 — Zyxel Prestige 660 vulnerability | cvebase