PT-2019-15100 · Zyxel · Zyxel Nbg-418N

D0X0 + 1 · Publicado 2019-10-09 · Atualizado 2020-08-24 · CVE-2019-17354

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zyxel NBG-418N v2 version V1.00(AARP.9)C0

Description The issue allows direct access to the wan.htm page without authentication, potentially leading to information disclosure about the WAN. An attacker can also modify data fields on this page.

Recommendations For Zyxel NBG-418N v2 version V1.00(AARP.9)C0, consider restricting access to the wan.htm page until a fix is available. As a temporary workaround, limit modifications to the data fields on this page to prevent potential exploitation.

Exploit

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2019-17354

Produtos afetados

Zyxel Nbg-418N

Referências · 4

• 🔥 https://github.com/d0x0/Zyxel-NBG-418N-v2/blob/master/CVE-2019-17354 · Exploit
• https://zyxel.com/us/en · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-17354 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-17354 · Aviso do Fabricante