CVE-2008-1257: Zyxel P-660hw

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter.

Affected products

• Zyxel P-660hw: version _t1 only
• Zyxel P-660hw d1: affected versions not specified; version v2 only
• Zyxel P-660hw d3: affected versions not specified
• Zyxel P-660hw t3: affected versions not specified; version v2 only

Published 2008-03-10. Last modified 2026-06-16.