Description
Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting.

This issue affects WAH7601: through 20072026.
Published: 2026-08-10
Score: 6.5 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability allows an attacker to expose sensitive system information by performing web application fingerprinting on the Zyxel WAH7601 router. This disclosure can reveal configuration details and system internals that are not intended to be publicly available, potentially facilitating further exploitation. The weakness corresponds to CWE-497, which involves improper restriction of sensitive information disclosure.

Affected Systems

The issue affects Zyxel Networks WAH7601 routers through firmware version 20072026. No other vendor or product versions are listed, so the scope is limited to this specific router model and indicated firmware release.

Risk and Exploitability

With a CVSS score of 6.5, the vulnerability represents a moderate severity level. The EPSS score is not available, so the current likelihood of exploitation is unknown, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be network-based, targeting the router's web administration interface, as the description mentions fingerprinting abilities. Since no exploitation path is described, it is presumed that administrative credentials or unauthenticated access to the web interface are required.

Generated by OpenCVE AI on August 10, 2026 at 13:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a firmware update that removes the vulnerability, preferably a release newer than version 20072026.
  • Restrict access to the router's administrative web interface to trusted IP ranges or disconnect it from the public network.
  • Enable strong authentication, such as WPA2/WPA3 EAP with 802.1X, and enforce HTTPS for the administrative interface to reduce the risk of unauthorized fingerprinting.

Generated by OpenCVE AI on August 10, 2026 at 13:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 10 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 10 Aug 2026 12:45:00 +0000

Type Values Removed Values Added
Description Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026.
Title Sensitive Data Exposure in Zyxel WAH7601 Router
Weaknesses CWE-497
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published:

Updated: 2026-08-10T18:03:12.932Z

Reserved: 2026-04-15T16:24:13.235Z

Link: CVE-2026-6373

cve-icon Vulnrichment

Updated: 2026-08-10T18:03:07.884Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T13:30:05Z

Weaknesses
  • CWE-497

    Exposure of Sensitive System Information to an Unauthorized Control Sphere