CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0CVE-2013-3588
https://notcve.org/view.php?id=CVE-2013-3588
The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a flood of TCP SYN packets. La interfaz de gestión web en dispositivos Zyxel P660 permite a atacantes remotos causar una denegación de servicio (reinicio) a través de una inundación de paquetes TCP SYN. • http://www.kb.cert.org/vuls/id/893726 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 57EXPL: 0CVE-2008-1526
https://notcve.org/view.php?id=CVE-2008-1526
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords. Los routers ZyXEL Prestige, incluyendo los modelos P-660, P-661 y P-662 con firmware 3.40(PE9) y 3.40(AGD.2) hasta la 3.40(AHQ.3), no utilizan salt cuando se calcula el hash de una contraseña MD5, lo cual facilita a los atacantes craquear contraseñas. • http://www.gnucitizen.org/projects/router-hacking-challenge http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf http://www.securityfocus.com/archive/1/489009/100/0/threaded • CWE-916: Use of Password Hash With Insufficient Computational Effort •
CVSS: 4.3EPSS: 0%CPEs: 7EXPL: 0CVE-2008-1257
https://notcve.org/view.php?id=CVE-2008-1257
Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter. vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Forms/DiagGeneral_2 del router ZyXEL P-660HW series permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro PingIPAddr. • http://www.gnucitizen.org/projects/router-hacking-challenge http://www.securityfocus.com/archive/1/489009/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/41109 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •