The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) up to and including 3.40(AHQ.3), has "public" as its default community for both (1) read and (2) write operations, which allows remote malicious users to perform administrative actions via SNMP, as demonstrated by reading the Dynamic DNS service password or inserting an XSS sequence into the system.sysName.0 variable, which is displayed on the System Status page.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
zyxel prestige 660 h-d1 |
||
zyxel prestige 660 h-d3 |
||
zyxel zynos 3.40 |
||
zyxel prestige 661 hw-d1 |
Vulmon