zyxel p-660hw t3 - vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote malicious users to inject arbitrary web script or HTML via the PingIPAddr parameter.

Zyxel P-660hw D1 -Zyxel P-660hw T3 V2 Zyxel P-660hw T1 Zyxel P-660hw D1 V2 Zyxel P-660hw T3 -Zyxel P-660hw D3 -

The web management interface on Zyxel P660 devices allows remote malicious users to cause a denial of service (reboot) via a flood of TCP SYN packets.

Zyxel P-660h-63 -Zyxel P-660hw D1 -Zyxel P-660hw T3 V2 Zyxel P-660hw T1 Zyxel P-660h-61 -Zyxel P-660h-t1 -Zyxel P-660h-67 -Zyxel P-660hw D1 V2 Zyxel P-660hw T3 -Zyxel P-660h-t3 V2 Zyxel P-660h-t1 V2 Zyxel P-660hw D3 -Zyxel P-660h-d3 -Zyxel P-660h-d1 -

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) up to and including 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for malicious users to crack passwords.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook