Weekly Vulnerabilities Reports > March 24 to 30, 2008

Overview

2 new vulnerabilities reported during this period, including 1 critical vulnerabilities and 1 high severity vulnerabilities. This weekly summary report vulnerabilities in 20 products from 1 vendors including and Zyxel. Vulnerabilities are notably categorized as "Use of Password Hash With Insufficient Computational Effort", and "Use of Hard-coded Credentials".

  • 2 reported vulnerabilities are remotely exploitables.
  • 2 reported vulnerabilities have public exploit available.
  • 2 reported vulnerabilities are exploitable by an anonymous user.
  • Zyxel has the most reported vulnerabilities, with 2 reported vulnerabilities.
  • Zyxel has the most reported critical vulnerabilities, with 1 reported vulnerabilities.

TOTAL
VULNERABILITIES
CRITICAL RISK
VULNERABILITIES
HIGH RISK
VULNERABILITIES
MEDIUM RISK
VULNERABILITIES
LOW RISK
VULNERABILITIES
REMOTELY
EXPLOITABLE
LOCALLY
EXPLOITABLE
EXPLOIT
AVAILABLE
EXPLOITABLE
ANONYMOUSLY
AFFECTING
WEB APPLICATION

Vulnerability Details

The following table list reported vulnerabilities for the period covered by this report:

Expand/Hide

1 Critical Vulnerabilities

DATE CVE VENDOR VULNERABILITY CVSS
2008-03-25 CVE-2008-1160 Zyxel Use of Hard-coded Credentials vulnerability in Zyxel Zywall 1050 Firmware

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges.

9.8

1 High Vulnerabilities

DATE CVE VENDOR VULNERABILITY CVSS
2008-03-26 CVE-2008-1526 Zyxel Use of Password Hash With Insufficient Computational Effort vulnerability in Zyxel products

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.

7.5

0 Medium Vulnerabilities

DATE CVE VENDOR VULNERABILITY CVSS

0 Low Vulnerabilities

DATE CVE VENDOR VULNERABILITY CVSS