CVE Catalog
CVE-2017-7964
CriticalSummary
Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process.
Risk Assessment
The default password poses a serious security risk, allowing attackers easy access to the device and potential control over DNS traffic.
Recommendation
It is recommended to immediately change the default TELNET password to a strong and unique password and to restrict access to the TELNET interface.
Original NVD description (English source)
Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process.