CVE-2008-1524 - CVE House
Back to Database
Status published High CVE-2008-1524

The SNMP service on ZyXEL Prestige routers, including P-660 and...

Vulnerability Description

The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has "public" as its default community for both (1) read and (2) write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by reading the Dynamic DNS service password or inserting an XSS sequence into the system.sysName.0 variable, which is displayed on the System Status page.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1524

Credits & Attribution

No credits recorded in the NVD database.

References

More from zyxel

View All →
CVE-2021-46387
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by...
Medium 6.1
CVE-2021-3297
On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to...
High 7.8
CVE-2020-29583
Firmware version 4.60 of Zyxel USG devices contains an undocumented...
Unknown 0
CVE-2020-29299
Certain Zyxel products allow command injection by an admin via...
High 7.2
CVE-2020-28899
The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does...
Critical 9.1

Affected Vendor

Affected Software

prestige 660, prestige 661, zynos
Vulnerable Versions:
h-d1, h-d3, hw-d1, 3.40

Timeline

Official Publish: March 26th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.