zyxel p-660hw t1 vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv2

The web management interface on Zyxel P660 devices allows remote malicious users to cause a denial of service (reboot) via a flood of TCP SYN packets.

Zyxel P-660h-63 -Zyxel P-660h-t1 -Zyxel P-660h-d3 -Zyxel P-660h-t1 V2 Zyxel P-660h-67 -Zyxel P-660hw D1 V2 Zyxel P-660hw T1 Zyxel P-660h-61 -Zyxel P-660hw T3 V2 Zyxel P-660hw T3 -Zyxel P-660hw D3 -Zyxel P-660h-t3 V2 Zyxel P-660h-d1 -Zyxel P-660hw D1 -

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote malicious users to inject arbitrary web script or HTML via the (1) LoginPassword or (2) hiddenPassword parameter.

Zyxel P-660hw-t1 V2 Firmware 3.40\\(axh.0\\)

6.8

CVSSv2

Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote malicious users to hijack the authentication of administrators for requests that change the (1) wifi password or (2) SSID via a request to Forms/WLAN_General_1.

Zyxel P-660hw T1

1 EDB exploit

10

CVSSv2

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote malicious users to obtain administrative access via unspecified vectors.

Zyxel Nbg-418n -Zyxel Zynos Firmware 3.40\\(axh.0\\)Zyxel Pmg5318-b20a Firmware V100aanc0b5

5

CVSSv2

The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate sessions upon a logout action, which allows remote malicious users to bypass intended access restrictions by leveraging an unattended workstation.

Zyxel Pmg5318-b20a Firmware V100aanc0b5

8.3

CVSSv2

ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative privileges by leveraging access to the user account.

Zyxel Pmg5318-b20a Firmware V100aanc0b5

10

CVSSv2

The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware prior to 1.00(AANC.2)C0 allows remote malicious users to execute arbitrary commands via the PingIPAddr parameter.

Zyxel Pmg5318-b20a Firmware

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook