CVE-2015-6016

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of…

published December 31, 2015

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚠️ A default password of '1234' could hand over the keys to your ZyXEL devices! It's like leaving your front door wide open with a welcome mat that says 'Come on in!' 🔐 Imagine leaving your house with the door unlocked and a sign outside saying you're home — that's the kind of welcome these devices are giving to attackers! This vulnerability allows anyone to waltz right in if they know the default admin password. An attacker could easily gain administrative access and control over the device, which could lead to unauthorized changes in settings, data breaches, or even turning your device into part of a botnet. That's absolutely devastating for your network's integrity!

Put simply

Imagine leaving your house with the door unlocked and a sign outside saying you're home — that's the kind of welcome these devices are giving to attackers! This vulnerability allows anyone to waltz right in if they know the default admin password. This vulnerability allows for remote attackers to gain administrative access to ZyXEL devices with the default admin password set to '1234'—an unsecure practice that can be exploited through various unspecified vectors.

What to do

An attacker could easily gain administrative access and control over the device, which could lead to unauthorized changes in settings, data breaches, or even turning your device into part of a botnet. That's absolutely devastating for your network's integrity! Immediately change the default password on all affected devices to a strong, unique password. Ensure to apply firmware updates if available and regularly review your network security settings! You've got this! With these steps, you'll secure your devices in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05731 · 93.0th percentile
Published
2015-12-31T02:00Z
EPSS history
Timeline
  • 31 DEC 02:00Z
    ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of…
    cvelistv5