CVE-2008-1523

ZyXEL Prestige 660/661/662 3.40(AGD.2)-3.40(AHQ.3) - Authenticated Credential Exposure

Title source: llm
STIX 2.1

Description

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for (1) WAN.html, (2) wzPPPOE.html, and (3) rpDyDNS.html, and then reading the HTML source.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489009/100/0/threaded
Various Sources x_refsource_misc
http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41509

Scores

EPSS 0.0032
EPSS Percentile 55.1%

Details

CWE
CWE-200
Status published
Products (4)
zyxel/prestige_660 h-d1
zyxel/prestige_660 h-d3
zyxel/prestige_661 hw-d1
zyxel/zynos 3.40 agd.2 (6 CPE variants)
Published Mar 26, 2008
Tracked Since Feb 18, 2026