CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2008-1526
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-916
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zyxel:p-660h-61_firmware
- zyxel:p-660h-63_firmware
- zyxel:p-660h-67_firmware
- zyxel:p-660h-d1_firmware
- zyxel:p-660h-d3_firmware
- zyxel:p-660h-t1_firmware
- zyxel:p-660hn-51_firmware
- zyxel:p-660hw_d1_firmware
- zyxel:p-660hw_d3_firmware
- zyxel:p-660hw_t3_firmware
- zyxel:p-661h_firmware
- zyxel:p-661hnu-f1_firmware
- zyxel:p-661hnu-f3_firmware
- zyxel:p-661hw-d1_firmware
- zyxel:p-662h-61_firmware
- zyxel:p-662hw-d1_firmware
- zyxel:p-662hw-d3_firmware
- zyxel:p-662hw-d_firmware
- zyxel:p-663hn-51_firmware