CVE-2008-1522: ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), hav...

Security readout for executives and security teams

Some ZyXEL Prestige routers shipped with well-known default passwords for both user and admin accounts. If those defaults remain unchanged and management access is reachable, an attacker could log in and control the device. This is primarily a legacy-router exposure issue, not a confirmed current exploitation campaign. Organizations are exposed if affected ZyXEL Prestige routers remain deployed with default credentials, especially if remote administration is reachable from untrusted networks. The provided CVE data does not identify CPEs, CVSS, or current asset prevalence. Prioritize if these routers still protect offices, branches, or customer networks. A default admin password on exposed edge equipment can quickly become business-impacting, but urgency depends on whether affected devices are still deployed and reachable. Mitigation focus: Identify any ZyXEL Prestige P-660 or P-661 devices and firmware versions.; Change default user and admin passwords to unique strong credentials.; Disable or tightly restrict remote management from untrusted networks..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.