CVE-2015-6016

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors.

• CWE-255

• http://www.securitytracker.com/id/1034552
• http://www.securitytracker.com/id/1034553
• http://www.securitytracker.com/id/1034554
• https://www.kb.cert.org/vuls/id/870744Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/BLUU-9ZQU2RThird Party Advisory, US Government Resource
• http://www.securitytracker.com/id/1034552
• http://www.securitytracker.com/id/1034553
• http://www.securitytracker.com/id/1034554
• https://www.kb.cert.org/vuls/id/870744Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/BLUU-9ZQU2RThird Party Advisory, US Government Resource

Published

Dec 31, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-6010Multiple cross-site scripting (XSS) vulnerabilities in Web R…
• CVE-2015-6011Web Reference Database (aka refbase) through 0.9.6 and bleed…
• CVE-2015-6012Multiple open redirect vulnerabilities in Web Reference Data…
• CVE-2015-6013Unspecified vulnerability in the Oracle Outside In Technolog…
• CVE-2015-6014Unspecified vulnerability in the Oracle Outside In Technolog…
• CVE-2015-6015Unspecified vulnerability in the Oracle Outside In Technolog…
• CVE-2015-6017Multiple cross-site scripting (XSS) vulnerabilities in Forms…
• CVE-2015-6018The diagnostic-ping implementation on ZyXEL PMG5318-B20A dev…
• CVE-2015-6019The management portal on ZyXEL PMG5318-B20A devices with fir…
• CVE-2015-6020ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow r…
• CVE-2015-6021Spiceworks Desktop before 2015-12-01 has XSS via an SNMP res…
• CVE-2015-6022Unrestricted file upload vulnerability in QNAP Signage Stati…