A vulnerability, which was classified as critical, has been found in ZyXEL P-660HW-T1, PMG5318-B20A and NBG-418N (Router Operating System) (version now known). This issue affects some unknown processing. The manipulation of the argument Password with the input value 1234 leads to a credentials management vulnerability. Using CWE to declare the problem leads to CWE-255. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors.

The weakness was disclosed 12/31/2015 (Website). It is possible to read the advisory at kb.cert.org. The identification of this vulnerability is CVE-2015-6016 since 08/14/2015. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1552 according to MITRE ATT&CK.

Addressing this vulnerability is possible by firewalling .

The entries VDB-79968, VDB-79969, VDB-79970 and VDB-79971 are pretty similar.

Productinfo

Type

• Router Operating System

Vendor

• ZyXEL

Name

• NBG-418N
• P-660HW-T1
• PMG5318-B20A

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion