CVE-2008-1527
Published Mar 26, 2008
Last updated 6 years ago
Overview
- Description
- ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-310
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9B37DD5-40E7-43E3-8183-A755C488E383"
},
{
"criteria": "cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2850459-830C-49FD-89F8-0693E6D33543"
},
{
"criteria": "cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C2C98B6-E370-4E2C-988D-CC3F3AA78126"
},
{
"criteria": "cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC9ED360-9257-477C-8F21-0CD4C1D38F42"
},
{
"criteria": "cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B170D9D8-4A01-4A97-947C-F978B07045C2"
},
{
"criteria": "cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D759579-E9E7-4344-BA88-CACECFB9C731"
},
{
"criteria": "cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"
},
{
"criteria": "cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2344FB7D-785D-4C52-BF27-1EEAAB2726B8"
},
{
"criteria": "cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEA7FE7B-31E2-4164-882B-2E9712F95044"
}
],
"operator": "OR"
}
]
}
]