1. Home
  2. CVE Database
  3. CVE-2019-6725
CRITICAL · 9.8

CVE-2019-6725

The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the H...

Vulnerability Description

The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ZyxelP-660Hn-T1 Firmware2.00\(aakk.3\)
ZyxelP-660Hn-T12

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2019-6725?

CVE-2019-6725 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the H...

How severe is CVE-2019-6725?

CVE-2019-6725 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-6725?

Check the references section above for vendor advisories and patch information. Affected products include: Zyxel P-660Hn-T1 Firmware, Zyxel P-660Hn-T1.