zyxel p-660hw Security Vulnerabilities

3 Vulnerabilities

Description
Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to (1) change DNS servers and (2) add keywords to the "bannedlist" via unspecified vectors. Impacted versions: * Base Score: 6.8, Severity: MEDIUM, ID: CVE-2008-1254, Last Modified: 2018-10-11T20:31:00Z References Exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentication of administrators for requests that change the (1) wifi password or (2) SSID via a request to Forms/WLAN_General_1. Impacted versions: _t1 Base Score: 6.8, Severity: MEDIUM, ID: CVE-2014-4162, Last Modified: 2014-07-17T05:07:00Z References Exploit
The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a flood of TCP SYN packets. Impacted versions: _t1, _t1 Base Score: 7.8, Severity: HIGH, ID: CVE-2013-3588, Last Modified: 2014-04-02T15:29:00Z References US Government Resource

Description

Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to (1) change DNS servers and (2) add keywords to the "bannedlist" via unspecified vectors.

Impacted versions: *

Base Score: 6.8, Severity: MEDIUM, ID: CVE-2008-1254, Last Modified: 2018-10-11T20:31:00Z

References

Exploit

Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentication of administrators for requests that change the (1) wifi password or (2) SSID via a request to Forms/WLAN_General_1.

Impacted versions: _t1

Base Score: 6.8, Severity: MEDIUM, ID: CVE-2014-4162, Last Modified: 2014-07-17T05:07:00Z

References

Exploit

The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a flood of TCP SYN packets.

Impacted versions: _t1, _t1

Base Score: 7.8, Severity: HIGH, ID: CVE-2013-3588, Last Modified: 2014-04-02T15:29:00Z

References

US Government Resource

USAGE: Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.