CVE-2008-1526

HIGH

ZyXEL Prestige P-660/P-661/P-662 Firmware 3.40 - Weak Password Hash Computational Effort

Title source: llm
STIX 2.1

Description

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.

References (3)

Core 3
Core References
Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489009/100/0/threaded

Scores

CVSS v3 7.5
EPSS 0.0089
EPSS Percentile 54.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-916
Status published
Products (38)
zyxel/p-660h-61_firmware 3.40\(pe9\)
zyxel/p-660h-61_firmware 3.40\(agd.2\) - 3.40\(ahq.3\)
zyxel/p-660h-63_firmware 3.40\(pe9\)
zyxel/p-660h-63_firmware 3.40\(agd.2\) - 3.40\(ahq.3\)
zyxel/p-660h-67_firmware 3.40\(pe9\)
zyxel/p-660h-67_firmware 3.40\(agd.2\) - 3.40\(ahq.3\)
zyxel/p-660h-d1_firmware 3.40\(pe9\)
zyxel/p-660h-d1_firmware 3.40\(agd.2\) - 3.40\(ahq.3\)
zyxel/p-660h-d3_firmware 3.40\(pe9\)
zyxel/p-660h-d3_firmware 3.40\(agd.2\) - 3.40\(ahq.3\)
... and 28 more
Published Mar 26, 2008
Tracked Since Feb 18, 2026