VULNERABILITY INTELLIGENCE
CVE-2008-1259
CVSS score9.3 HIGH
EPSS probability2.39%
CISA KEVNot currently listed
Published2008-03-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes.
Weakness classification
- CWE-287: Improper Authentication