QwikSec

Security Database

CVE

CWE

Training

CVE-2008-1528

Published: Mar 26, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for (1) RemMagSNMP.html, which discloses SNMP communities; or (2) WLAN.html, which discloses WEP keys.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20080301 The Router Hacking Challenge is Over!

mailing-list

x_refsource_BUGTRAQ

http://www.gnucitizen.org/projects/router-hacking-challenge/

x_refsource_MISC

http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf

x_refsource_MISC

zyxelprestige-snmp-wep-info-disclosure(41511)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.