CVE-2008-1527 Auth bypass in n/a

High 7.5 Published 26 Mar 2008 Updated 7 Aug 2024

Remote attackers can bypass authentication on ZyXEL Prestige routers by replaying a captured hash string, gaining unauthorized access.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2008-1527?

CVE-2008-1527 is a high-severity authentication bypass vulnerability in n/a, published on 26 Mar 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack.

Weakness: CWE-310

Which versions are affected by CVE-2008-1527?

It affects 3 products.

Products include Zyxel Prestige 660, Zyxel Prestige 661, Zyxel Zynos.

How do I fix CVE-2008-1527?

No fix has been published for CVE-2008-1527 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2008-1527 being exploited?

There is no known exploitation of CVE-2008-1527 in the wild and no public exploit code.

Sources

Also known as GHSA-rqr6-f773-2wgq.