CVE

Id
31640  
CVE No.
CVE-2008-1523  
Status
Candidate  
Description
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for (1) WAN.html, (2) wzPPPOE.html, and (3) rpDyDNS.html, and then reading the HTML source.  
Phase
Assigned (20080325)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
340003 31640 CVE-2008-1523 BUGTRAQ:20080301 The Router Hacking Challenge is Over!  View
340004 31640 CVE-2008-1523 URL:http://www.securityfocus.com/archive/1/archive/1/489009/100/0/threaded  View
340005 31640 CVE-2008-1523 MISC:http://www.gnucitizen.org/projects/router-hacking-challenge/  View
340006 31640 CVE-2008-1523 MISC:http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf  View
340007 31640 CVE-2008-1523 XF:zyxelprestige-multiple-info-disclosure(41509)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50318 JVNDB-2008-005628 ZyXEL Prestige ルータにおけるアクセス権を取得される脆弱性 P-660、P-661、および P-662 モデルを含む ZyXEL Prestige ルータは、hiddenPassword フィールド内のハッシュ文字列でHTTP 経由の認証をサポートするため、アクセス権を取得される脆弱性が存在します。 CVE-2008-1527 31640 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005628.html  View