CVE-2008-1160 ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges.
CriticalCVSS 9.8
EPSS 14.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel zywall 1050 firmware | All versions | No fix listed |
References
- packetstormsecurity.org broken-link
- 29237 broken-link third-party-advisory vendor-advisory
- www.secumania.org broken-link url-repurposed
- 28184 broken-link third-party-advisory vdb-entry
- ADV-2008-0990 broken-link vdb-entry vendor-advisory
- zywall-quagga-zebra-default-password(41424) third-party-advisory vdb-entry
- 5289 exploit third-party-advisory vdb-entry