CVE-2008-1524: XSS
The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has "public" as its default community for both (1) read and (2) write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by reading the Dynamic DNS service password or inserting an XSS sequence into the system.sysName.0 variable, which is displayed on the System Status page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1524?
CVE-2008-1524 has a critical severity rating due to its potential to allow unauthorized remote access and administrative control.
How do I fix CVE-2008-1524?
To fix CVE-2008-1524, change the default SNMP community string from "public" to a more secure value.
Which devices are affected by CVE-2008-1524?
CVE-2008-1524 affects ZyXEL Prestige routers, specifically models P-660 and P-661 running affected firmware versions.
Can CVE-2008-1524 be exploited remotely?
Yes, CVE-2008-1524 can be exploited remotely, allowing attackers to perform administrative actions via SNMP.
Is there a patch available for CVE-2008-1524?
ZyXEL has not released a specific patch for CVE-2008-1524; users are advised to secure their SNMP settings.