Unscored CVE-2008-1255 EUVD-2008-1263GHSA-65mm-vp95-x59v

The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass authentication by est…

Published Mar 10, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user.

References

20080301 The Router Hacking Challenge is Over! mailing-list
zyxel-p660hw-ip-authentication-bypass(41114) vdb-entry
http://www.gnucitizen.org/projects/router-hacking-challenge/