CVE-2008-1160

9.8 CRITICAL

Published: March 25, 2008 Modified: April 23, 2026

Description

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://packetstormsecurity.org/0803-exploits/ZyWALL.pdf

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29237

Source: cve@mitre.org

Broken Link Vendor Advisory

http://www.secumania.org/exploits/remote/zyxel-zywall-quagga_zebra-%28default-pass%29-remote-root-vulnerability-2008032143791/

Source: cve@mitre.org

Broken Link URL Repurposed

http://www.securityfocus.com/bid/28184

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.vupen.com/english/advisories/2008/0990/references

Source: cve@mitre.org

Broken Link Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/41424

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://www.exploit-db.com/exploits/5289

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://packetstormsecurity.org/0803-exploits/ZyWALL.pdf