What’s Vulnerable › Vulnerabilities

CVE-2008-1526

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-03-26 · updated 2026-06-16
• Weakness: CWE-916

Description

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.

Affected products

• Zyxel P-660H-61 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660H-63 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660H-67 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660H-D1 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660H-D3 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660H-T1 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660Hn-51 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660Hw D1 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660Hw D3 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-660Hw T3 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-661H Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-661Hnu-F1 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-661Hnu-F3 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-661Hw-D1 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-662H-61 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-662Hw-D1 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-662Hw-D3 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-662Hw-D Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)
• Zyxel P-663Hn-51 Firmware: from 3.40\(agd.2\) through 3.40\(ahq.3\); 3.40(pe9)

References

• http://www.gnucitizen.org/projects/router-hacking-challenge/
• http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
• http://www.securityfocus.com/archive/1/489009/100/0/threaded
• http://www.gnucitizen.org/projects/router-hacking-challenge/
• http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
• http://www.securityfocus.com/archive/1/489009/100/0/threaded

Get alerted when CVE-2008-1526 or the next vulnerability affects your stack