7.5
CVE-2008-1526
- EPSS 0.2%
- Published 26.03.2008 10:44:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.
Data is provided by the National Vulnerability Database (NVD)
Zyxel ≫ P-663hn-51 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660h-61 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660h-63 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660h-67 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660h-d1 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660h-d3 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660hn-51 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660h-t1 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660hw D1 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660hw D3 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-660hw T3 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-661hnu-f1 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-661h Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-661hw-d1 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-661hnu-f3 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-662hw-d3 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-662hw-d Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-662hw-d1 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zyxel ≫ P-662h-61 Firmware Version >= 3.40\(agd.2\) <= 3.40\(ahq.3\)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.384 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-916 Use of Password Hash With Insufficient Computational Effort
The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.