CVE:CVE-2008-1527
CNNVD:CNNVD-200803-433
ZyXEL Prestige路由器, 包括带有固件3.40(PE9)以及3.40(AGD.2)到3.40(AHQ.3)的P-660，P-661和P-662模式，支持借助隐藏密码字段中的无效字符串越过HTTP的验证，这使得远程攻击者可以借助replay攻击获得访问权限。
solution:Upgrade zyxel prestige_660 to a higher version than h-d1,h-d3,and avoid the version h-d1,h-d3; Upgrade zyxel prestige_661 to a higher version than hw-d1,and avoid the version hw-d1; Upgrade zyxel zynos to a higher version than 3.40:agd.2,3.40:agl.3,3.40:ahq.0,3.40:ahq.3,3.40:ahz.0,3.40:atm.0,and avoid the version 3.40:agd.2,3.40:agl.3,3.40:ahq.0,3.40:ahq.3,3.40:ahz.0,3.40:atm.0