Zyxel Prestige vulnerabilities

7 CVEs affecting Zyxel Prestige, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0328, published 2005-05-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1540, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 6.6% chance of exploitation in the next 30 days. ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers…
CVE-2002-1071, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with both the SYN and ACK flags set.
CVE-2002-1072, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet.
CVE-2004-0670, published 2004-08-06. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) via a long password.
CVE-2001-1135, published 2001-08-14. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the…
CVE-2004-1684, published 2004-09-13. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network.
CVE-2005-0328, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address,…