CVE-2008-1160

Опубликовано: 25 мар. 2008

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges.

Ссылки

http://packetstormsecurity.org/0803-exploits/ZyWALL.pdf
Broken Link
http://secunia.com/advisories/29237
Broken Link
Vendor Advisory
http://www.secumania.org/exploits/remote/zyxel-zywall-quagga_zebra-%28default-pass%29-remote-root-vulnerability-2008032143791/
Broken Link
URL Repurposed
http://www.securityfocus.com/bid/28184
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/0990/references
Broken Link
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41424
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/5289
Third Party Advisory
VDB Entry
http://packetstormsecurity.org/0803-exploits/ZyWALL.pdf
Broken Link
http://secunia.com/advisories/29237
Broken Link
Vendor Advisory
http://www.secumania.org/exploits/remote/zyxel-zywall-quagga_zebra-%28default-pass%29-remote-root-vulnerability-2008032143791/
Broken Link
URL Repurposed
http://www.securityfocus.com/bid/28184
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/0990/references
Broken Link
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41424
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/5289
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:zyxel:zywall_1050_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:zyxel:zywall_1050:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09752

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-798

Связанные уязвимости

GHSA-43rr-prv9-867f

CVSS3: 9.8

github

около 3 лет назад

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges.

BDU:2014-00048

CVSS3: 9.8

fstec

около 17 лет назад

Уязвимость операционной системы Zyxel ZLD, позволяющая удаленному злоумышленнику повысить свои привилегии

EPSS

Процентиль: 93%

0.09752

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-798