What’s Vulnerable › Vulnerabilities
CVE-2019-6725
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-05-31 · updated 2026-06-17
- Weakness: CWE-798
Description
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.
Affected products
- Zyxel P-660Hn-T1 Firmware: 2.00(aakk.3)
References
Get alerted when CVE-2019-6725 or the next vulnerability affects your stack