CVE-2018-5330: High severity Zyxel P-660hw V3 Firmware vulnerability
Published Jan 16, 2018
·Updated
ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (router unreachable/unresponsive) via a flood of fragmented UDP packets.
Affected Software
4 affected components
Zyxel P-660hw V3 Firmware
Zyxel P-660HW v3
All of the following
Zyxel P-660hw V3 Firmware
Zyxel P-660HW v3
Event History
Jan 16, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-5330?
CVE-2018-5330 has a high severity level due to its potential to cause denial of service on affected ZyXEL P-660HW v3 devices.
2
How do I fix CVE-2018-5330?
To fix CVE-2018-5330, users should update their ZyXEL P-660HW v3 firmware to a secure version provided by the manufacturer.
3
Who is affected by CVE-2018-5330?
CVE-2018-5330 affects users of the ZyXEL P-660HW v3 device running vulnerable firmware versions.
4
What type of attack does CVE-2018-5330 involve?
CVE-2018-5330 involves a denial of service attack that uses a flood of fragmented UDP packets to make the router unreachable.
5
Is there a workaround for CVE-2018-5330?
A potential workaround for CVE-2018-5330 is to implement firewall rules to limit access to the UDP ports on the device.