CVE-2008-1526: High severity zyxel p-663hn-51 firmware vulnerability

Q: What is the severity of CVE-2008-1526?

CVE-2008-1526 is considered a high-severity vulnerability due to the lack of a salt in MD5 password hashing, making it easier to crack passwords.

Q: How do I fix CVE-2008-1526?

To fix CVE-2008-1526, upgrade your ZyXEL Prestige router firmware to a version that implements secure password hashing.

Q: Which ZyXEL devices are affected by CVE-2008-1526?

CVE-2008-1526 affects several ZyXEL Prestige models, specifically the P-660, P-661, and P-662 with specific firmware versions.

Q: What are the implications of CVE-2008-1526 for network security?

CVE-2008-1526 can lead to unauthorized access to the network if attackers successfully crack weak passwords.

Q: Is there a workaround for CVE-2008-1526 if firmware cannot be updated?

If updating firmware is not possible, it is recommended to change passwords to complex, unique options to mitigate the risk associated with CVE-2008-1526.

Published Mar 26, 2008

Updated

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.

Affected Software

66 affected components

All of the following

Any of the following

Zyxel P-663hn-51 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-663hn-51 Firmware=3.40\(pe9\)

Zyxel P-663HN-51

All of the following

Any of the following

Zyxel P-660h-61 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660h-61 Firmware=3.40\(pe9\)

Zyxel P-660h-61

All of the following

Any of the following

Zyxel P-660h-63 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660h-63 Firmware=3.40\(pe9\)

Zyxel P-660h-63

All of the following

Any of the following

Zyxel P-660h-67 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660h-67 Firmware=3.40\(pe9\)

Zyxel P-660h-67

All of the following

Any of the following

Zyxel P-660h-d1 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660h-d1 Firmware=3.40\(pe9\)

Zyxel P-660h-d1

All of the following

Any of the following

Zyxel P-660h-d3 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660h-d3 Firmware=3.40\(pe9\)

Zyxel P-660h-d3

All of the following

Any of the following

Zyxel P-660hn-51 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660hn-51 Firmware=3.40\(pe9\)

Zyxel P-660HN-51

All of the following

Any of the following

Zyxel P-660h-t1 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660h-t1 Firmware=3.40\(pe9\)

Zyxel P-660h-t1

All of the following

Any of the following

Zyxel P-660hw D1 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660hw D1 Firmware=3.40\(pe9\)

Zyxel P-660hw D1

All of the following

Any of the following

Zyxel P-660hw D3 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660hw D3 Firmware=3.40\(pe9\)

Zyxel P-660hw D3

All of the following

Any of the following

Zyxel P-660hw T3 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-660hw T3 Firmware=3.40\(pe9\)

Zyxel P-660hw T3

All of the following

Any of the following

Zyxel P-661hnu-f1 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-661hnu-f1 Firmware=3.40\(pe9\)

Zyxel P-661hnu-f1

All of the following

Any of the following

Zyxel P-661h Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-661h Firmware=3.40\(pe9\)

Zyxel P-661h

All of the following

Any of the following

Zyxel P-661hw-d1 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-661hw-d1 Firmware=3.40\(pe9\)

Zyxel P-661hw-d1

All of the following

Any of the following

Zyxel P-661hnu-f3 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-661hnu-f3 Firmware=3.40\(pe9\)

Zyxel P-661hnu-f3

All of the following

Any of the following

Zyxel P-662hw-d3 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-662hw-d3 Firmware=3.40\(pe9\)

Zyxel P-662hw-d3

All of the following

Any of the following

Zyxel P-662hw-d Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-662hw-d Firmware=3.40\(pe9\)

Zyxel P-662hw-d

All of the following

Any of the following

Zyxel P-662hw-d1 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-662hw-d1 Firmware=3.40\(pe9\)

Zyxel P-662hw-d1

All of the following

Any of the following

Zyxel P-662h-61 Firmware>=3.40\(agd.2\)<=3.40\(ahq.3\)

Zyxel P-662h-61 Firmware=3.40\(pe9\)

Zyxel P-662h-61

Zyxel Prestige 660=h-d1

Zyxel Prestige 660=h-d3

Zyxel Prestige 661=hw-d1

Zyxel ZyNOS=3.40-agd.2

Zyxel ZyNOS=3.40-agl.3

Zyxel ZyNOS=3.40-ahq.0

Zyxel ZyNOS=3.40-ahq.3

Zyxel ZyNOS=3.40-ahz.0

Zyxel ZyNOS=3.40-atm.0

Event History

Mar 26, 2008

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1526?

CVE-2008-1526 is considered a high-severity vulnerability due to the lack of a salt in MD5 password hashing, making it easier to crack passwords.

How do I fix CVE-2008-1526?

To fix CVE-2008-1526, upgrade your ZyXEL Prestige router firmware to a version that implements secure password hashing.

Which ZyXEL devices are affected by CVE-2008-1526?

CVE-2008-1526 affects several ZyXEL Prestige models, specifically the P-660, P-661, and P-662 with specific firmware versions.

What are the implications of CVE-2008-1526 for network security?

CVE-2008-1526 can lead to unauthorized access to the network if attackers successfully crack weak passwords.

Is there a workaround for CVE-2008-1526 if firmware cannot be updated?

If updating firmware is not possible, it is recommended to change passwords to complex, unique options to mitigate the risk associated with CVE-2008-1526.

CVE-2008-1526: High severity zyxel p-663hn-51 firmware vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2008-1526?

How do I fix CVE-2008-1526?

Which ZyXEL devices are affected by CVE-2008-1526?

What are the implications of CVE-2008-1526 for network security?

Is there a workaround for CVE-2008-1526 if firmware cannot be updated?

Company

Resources

Contact