CVE-2008-1256

The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access

published March 10, 2008

CVSS
β€”
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

🚨 Leaving the default password "admin" on your ZyXEL P-660HW router is like leaving the front door to your house wide open β€” it’s an invitation for trouble! πŸ”₯ Think of your router as the front desk of a hotel. If the receptionist doesn't verify guests properly, anyone could stroll in and take advantage of all the amenities without a reservation! If an attacker exploits this vulnerability, they could gain full administrative access to your router, allowing them to alter settings, eavesdrop on network traffic, or even redirect your web sessions. This could lead to devastating consequences like data theft or unauthorized access to sensitive information.

Put simply

Think of your router as the front desk of a hotel. If the receptionist doesn't verify guests properly, anyone could stroll in and take advantage of all the amenities without a reservation! This vulnerability arises from the ZyXEL P-660HW router using "admin" as its default password, meaning anyone who knows this can gain unauthorized access without any further authentication needed.

What to do

If an attacker exploits this vulnerability, they could gain full administrative access to your router, allowing them to alter settings, eavesdrop on network traffic, or even redirect your web sessions. This could lead to devastating consequences like data theft or unauthorized access to sensitive information. To protect your network, change the default password immediately to something strong and complex. Additionally, consider enabling features like firewall settings and updating the router firmware to the latest version for better security. You've got this! Just follow these steps, and you'll keep your network safe and sound. πŸ›‘οΈ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03294 Β· 88.4th percentile
Published
2008-03-10T17:00Z
EPSS history
Timeline
  • 10 MAR 17:00Z
    The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access
    cvelistv5