PT-2019-15100 · Zyxel · Zyxel Nbg-418N

D0X0 + 1 · Published 2019-10-09 · Updated 2020-08-24 · CVE-2019-17354

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zyxel NBG-418N v2 version V1.00(AARP.9)C0

Description The issue allows direct access to the wan.htm page without authentication, potentially leading to information disclosure about the WAN. An attacker can also modify data fields on this page.

Recommendations For Zyxel NBG-418N v2 version V1.00(AARP.9)C0, consider restricting access to the wan.htm page until a fix is available. As a temporary workaround, limit modifications to the data fields on this page to prevent potential exploitation.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-17354

Affected Products

Zyxel Nbg-418N

References · 4

• 🔥 https://github.com/d0x0/Zyxel-NBG-418N-v2/blob/master/CVE-2019-17354 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17354 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17354 · Vendor Advisory
• https://zyxel.com/us/en · Note