« Back to list

CVE-2008-1529

Status: ModifiedMedium (5)—

ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (3)

Zyxel — Prestige 660Zyxel — Prestige 661Zyxel — Zynos

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2008-1529",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-03-26T10:44:00.000",
  "references": [
    {
      "url": "http://www.gnucitizen.org/projects/router-hacking-challenge/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/489009/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41513",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.gnucitizen.org/projects/router-hacking-challenge/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/489009/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41513",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods."
    },
    {
      "lang": "es",
      "value": "Los routers ZyXEL Prestige tienen un mínimo de longitud de contraseña para la cuenta admin que es demasiado pequeña, lo cual facilita a los atacantes remotos adivinar contraseñas mediante métodos de fuerza bruta."
    }
  ],
  "lastModified": "2026-06-16T22:51:55.047",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9B37DD5-40E7-43E3-8183-A755C488E383"
            },
            {
              "criteria": "cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2850459-830C-49FD-89F8-0693E6D33543"
            },
            {
              "criteria": "cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C2C98B6-E370-4E2C-988D-CC3F3AA78126"
            },
            {
              "criteria": "cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC9ED360-9257-477C-8F21-0CD4C1D38F42"
            },
            {
              "criteria": "cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B170D9D8-4A01-4A97-947C-F978B07045C2"
            },
            {
              "criteria": "cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D759579-E9E7-4344-BA88-CACECFB9C731"
            },
            {
              "criteria": "cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"
            },
            {
              "criteria": "cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2344FB7D-785D-4C52-BF27-1EEAAB2726B8"
            },
            {
              "criteria": "cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEA7FE7B-31E2-4164-882B-2E9712F95044"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}