CVE-2015-6016: Zyxel Nbg-418n

Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days.

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors.

Affected products

• Zyxel Nbg-418n: affected versions not specified
• Zyxel PMG5318-b20a Firmware: version v100aanc0b5 only
• Zyxel Zynos Firmware: version 3.40(axh.0) only

Published 2015-12-31. Last modified 2026-06-17.