Zyxel Prestige 661 vulnerabilities

8 CVEs affecting Zyxel Prestige 661, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1529, published 2008-03-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-1527, published 2008-03-26. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword…
CVE-2008-1522, published 2008-03-26. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), have (1) "user" as their default password for the "user" account and (2) "1234" as their…
CVE-2008-1524, published 2008-03-26. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has "public" as its default community for both (1) read and (2) write…
CVE-2008-1523, published 2008-03-26. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a…
CVE-2008-1529, published 2008-03-26. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods.
CVE-2008-1525, published 2008-03-26. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has a Trusted Host value of 0.0.0.0, which allows remote…
CVE-2008-1521, published 2008-03-26. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to gain privileges by accessing administrative URIs, as…
CVE-2008-1528, published 2008-03-26. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain authentication data by making direct HTTP…