Vulnerabilities > CVE-2014-0354 - Credentials Management vulnerability in Zyxel products

047910
CVSS 7.8 - HIGH
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
NONE
low complexity
zyxel
CWE-255

Summary

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password of qweasdzxc for an unspecified account, which allows remote attackers to obtain index.asp login access via an HTTP request.

Vulnerable Configurations

Part Description Count
OS
Zyxel
1
Hardware
Zyxel
1

Common Weakness Enumeration (CWE)