How severe is CVE-2004-1684?

CVE-2004-1684 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2004-1684 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2004-1684?

CVE-2004-1684 primarily affects Zyxel Prestige. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2004-1684?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2004-1684 published?

CVE-2004-1684 was published on 2004-09-13 and last updated on 2026-06-16.

CVE-2004-1684

CVE-2004-1684 is a medium-severity vulnerability in Zyxel Prestige with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 1% (69th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Zyxel Prestige
Published: 2004-09-13
Last modified: 2026-06-16

Description

Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network.

Frequently asked questions

What is CVE-2004-1684?: Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network.
How severe is CVE-2004-1684?: CVE-2004-1684 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2004-1684 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2004-1684?: CVE-2004-1684 primarily affects Zyxel Prestige. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2004-1684?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2004-1684 published?: CVE-2004-1684 was published on 2004-09-13 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:h:zyxel:prestige:681:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zynos:vt020225a:*:*:*:*:*:*:*

More vulnerabilities in Zyxel Prestige

CVE-2001-1135 — High (CVSS 7.5): ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface…
CVE-2005-0328 — Medium (CVSS 5.0): Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to…
CVE-2004-1540 — Medium (CVSS 5.0): ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does…
CVE-2004-0670 — Medium (CVSS 5.0): Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot)…
CVE-2002-1072 — Medium (CVSS 5.0): ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via…
CVE-2002-1071 — Medium (CVSS 5.0): ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash)…

All CVEs affecting Zyxel Prestige →