Authentication Bypass Vulnerability in ZyXEL P-660HW Series Router

CVE-2008-1255

Summary

The ZyXEL P-660HW series router is susceptible to an authentication bypass vulnerability that allows attackers to exploit the router's IP address-based session management. By impersonating a previously authenticated user’s IP address, an attacker can gain unauthorized access to the router. This flaw highlights the importance of robust session management and the risks associated with IP-based authentication in network devices. Users are advised to implement all available security updates and consider additional protective measures.

References