CVE-2017-7964
CriticalSummary
Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process.
Risk Assessment
The default password poses a serious security risk, allowing attackers easy access to the device and potential control over DNS traffic.
Recommendation
It is recommended to immediately change the default TELNET password to a strong and unique password and to restrict access to the TELNET interface.
Other vulnerabilities in Zyxel WRE6505
See all- CVE-2026-7255Medium
An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the password and bypass authentication.
- CVE-2026-6058Medium
An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 allows an adjacent attacker on the WLAN to cause a denial-of-service (DoS) condition in the web management interface. The attack requires convincing an authenticated administrator to visit the “AP Select” page while a malformed SSID is present.
Original NVD description (English source)
Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS