Description
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.
Scores
CVSS v3
7.5
EPSS
0.0019
EPSS Percentile
41.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-916
Status
published
Products (38)
zyxel/p-660h-61_firmware
3.40\(pe9\)
zyxel/p-660h-61_firmware
3.40\(agd.2\) - 3.40\(ahq.3\)
zyxel/p-660h-63_firmware
3.40\(pe9\)
zyxel/p-660h-63_firmware
3.40\(agd.2\) - 3.40\(ahq.3\)
zyxel/p-660h-67_firmware
3.40\(pe9\)
zyxel/p-660h-67_firmware
3.40\(agd.2\) - 3.40\(ahq.3\)
zyxel/p-660h-d1_firmware
3.40\(pe9\)
zyxel/p-660h-d1_firmware
3.40\(agd.2\) - 3.40\(ahq.3\)
zyxel/p-660h-d3_firmware
3.40\(pe9\)
zyxel/p-660h-d3_firmware
3.40\(agd.2\) - 3.40\(ahq.3\)
... and 28 more
Published
Mar 26, 2008
Tracked Since
Feb 18, 2026