CVE-2008-1526

HIGH

ZyXEL Prestige - Password Cracking

Title source: llm

Description

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.

References (3)

Scores

CVSS v3 7.5
EPSS 0.0019
EPSS Percentile 41.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-916
Status draft

Affected Products (38)

zyxel/p-663hn-51_firmware < 3.40\(ahq.3\)
zyxel/p-663hn-51_firmware
zyxel/p-660h-61_firmware < 3.40\(ahq.3\)
zyxel/p-660h-61_firmware
zyxel/p-660h-63_firmware < 3.40\(ahq.3\)
zyxel/p-660h-63_firmware
zyxel/p-660h-67_firmware < 3.40\(ahq.3\)
zyxel/p-660h-67_firmware
zyxel/p-660h-d1_firmware < 3.40\(ahq.3\)
zyxel/p-660h-d1_firmware
zyxel/p-660h-d3_firmware < 3.40\(ahq.3\)
zyxel/p-660h-d3_firmware
zyxel/p-660hn-51_firmware < 3.40\(ahq.3\)
zyxel/p-660hn-51_firmware
zyxel/p-660h-t1_firmware < 3.40\(ahq.3\)
... and 23 more

Timeline

Published Mar 26, 2008
Tracked Since Feb 18, 2026