CVE-2008-1526: Zyxel P-660h-61 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.

Affected products

  • Zyxel P-660h-61 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660h-63 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660h-67 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660h-d1 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660h-d3 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660h-t1 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660hn-51 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660hw d1 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660hw d3 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-660hw t3 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-661h Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-661hnu-f1 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-661hnu-f3 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-661hw-d1 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-662h-61 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-662hw-d1 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-662hw-d3 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-662hw-D Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only
  • Zyxel P-663hn-51 Firmware: from 3.40\(agd.2\), up to and including 3.40\(ahq.3\); version 3.40(pe9) only

Published 2008-03-26. Last modified 2026-06-16.