CVE-2019-6725

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
May 31, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-67266.5The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fasCVE-2019-67278.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirCVE-2019-67286.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction iCVE-2019-67298.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirCVE-2019-67308.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirCVE-2019-67318.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is reCVE-2019-67326.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiCVE-2019-67336.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiCVE-2019-67346.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiCVE-2019-67356.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction iCVE-2019-67368.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User intCVE-2019-67378.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User int
CVE-2019-6725: Critical severity, CVSS 9.8 | Vulnix