CVE-2008-1527

ZyXEL Prestige 660 661 662 - Unauthenticated Authentication Bypass via HTTP HiddenPassword Replay

Title source: llm
STIX 2.1

Description

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489009/100/0/threaded
Various Sources x_refsource_misc
http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf

Scores

EPSS 0.0062
EPSS Percentile 70.2%

Details

CWE
CWE-310
Status published
Products (4)
zyxel/prestige_660 h-d1
zyxel/prestige_660 h-d3
zyxel/prestige_661 hw-d1
zyxel/zynos 3.40 agd.2 (6 CPE variants)
Published Mar 26, 2008
Tracked Since Feb 18, 2026