CVE-2008-1527: ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) th...

Security readout for executives and security teams

Certain legacy ZyXEL Prestige routers accepted a reusable HTTP authentication hash instead of proving the user knew the password. If an attacker obtained that hash, they could replay it and gain router access. The issue is old, but exposed legacy routers can still create material network risk. Exposure is most likely in legacy ZyXEL Prestige routers still deployed, especially where HTTP administration is reachable from untrusted networks. The bundle names specific firmware versions but does not provide complete CPE data or a vendor-supported affected-products matrix. Prioritize discovery and containment of affected legacy routers. The urgency is highest when router administration is internet-facing or reachable by broad internal networks. Unsupported devices should be replaced rather than treated as long-term manageable risk. Mitigation focus: Inventory ZyXEL Prestige P-660, P-661, and P-662 devices and firmware versions.; Disable remote HTTP administration from untrusted networks.; Restrict router management to trusted administrative networks or VPN access..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.