Vulnerabilities > CVE-2008-1525 - Configuration vulnerability in Zyxel Prestige 660, Prestige 661 and Zynos
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Hardware | 9 |
Common Weakness Enumeration (CWE)
References
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
- http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
- http://www.securityfocus.com/archive/1/489009/100/0/threaded