CVE-2008-1526
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2008-03-26
- Last modified
- 2024-08-07
- Weaknesses
- CWE-916
Affected products
- P-660h-61 Firmware (Zyxel)
- P-660h-63 Firmware (Zyxel)
- P-660h-67 Firmware (Zyxel)
- P-660h-d1 Firmware (Zyxel)
- P-660h-d3 Firmware (Zyxel)
- P-660h-t1 Firmware (Zyxel)
- P-660hn-51 Firmware (Zyxel)
- P-660hw D1 Firmware (Zyxel)
- P-660hw D3 Firmware (Zyxel)
- P-660hw T3 Firmware (Zyxel)
- P-661h Firmware (Zyxel)
- P-661hnu-f1 Firmware (Zyxel)
- P-661hnu-f3 Firmware (Zyxel)
- P-661hw-d1 Firmware (Zyxel)
- P-662h-61 Firmware (Zyxel)
- P-662hw-d1 Firmware (Zyxel)
- P-662hw-d3 Firmware (Zyxel)
- P-662hw-d Firmware (Zyxel)
- P-663hn-51 Firmware (Zyxel)
References
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
