CVE-2008-1525

ZyXEL Prestige 660 and 661 - Unauthenticated SNMP Access via Default Trusted Host Configuration

Title source: llm
STIX 2.1

Description

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489009/100/0/threaded
Various Sources x_refsource_misc
http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf

Scores

EPSS 0.0030
EPSS Percentile 53.4%

Details

CWE
CWE-16
Status published
Products (4)
zyxel/prestige_660 h-d1
zyxel/prestige_660 h-d3
zyxel/prestige_661 hw-d1
zyxel/zynos 3.40 agd.2 (6 CPE variants)
Published Mar 26, 2008
Tracked Since Feb 18, 2026