high7.5

CVE-2008-1526

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculatin…

Impact

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.

Affected products

Vendor	Product	Affected versions
Zyxel	P-663hn-51 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660h-61 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660h-63 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660h-67 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660h-D1 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660h-D3 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660hn-51 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660h-T1 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660hw D1 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660hw D3 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-660hw T3 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)
Zyxel	P-661hnu-F1 Firmware	from 3.40\(agd.2\) through 3.40\(ahq.3\) Version 3.40\(pe9\)

Weakness classification

CWE-916

Impact

Affected products

Weakness classification

References