CVE-2008-1261: Zyxel P-2602hw-d1a

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI.

Affected products

• Zyxel P-2602hw-d1a: version 3.40(ajz.1) only

Published 2008-03-10. Last modified 2026-06-16.