What is CVE-2016-10401?

CVE-2016-10401 is a high-severity vulnerability in Zyxel Pk5001z, classified under CWE-255. CVSS score: 8.8/10. Published 2017-07-25.

How severe is CVE-2016-10401?

High severity. CVSS v3 base score is 8.8 out of 10.

Is CVE-2016-10401 known to be exploited?

7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Zyxel Pk5001z

CVE-2016-10401

ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists within an ISP's deployment of these devices).

EPSS: 0.121 (95.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-255

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2016-10401?: CVE-2016-10401 is a high-severity vulnerability in Zyxel Pk5001z, classified under CWE-255. CVSS score: 8.8/10. Published 2017-07-25.
How severe is CVE-2016-10401?: High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2016-10401 known to be exploited?: 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.