PT-2020-15703 · Zyxel · Zyxel Vmg5313-B30B

Published 2020-09-02 · Updated 2020-09-11 · CVE-2020-24355

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zyxel VMG5313-B30B router versions 5.13(ABCJ.6)b3 1127 and possibly earlier

Description The issue concerns insecure permissions that allow regular and other users to create new users with elevated privileges. This is achieved by modifying the FirstIndex field in the JSON data sent during account creation via a POST request. A similar vulnerability may also exist for account deletion.

Recommendations For version 5.13(ABCJ.6)b3 1127 and possibly earlier, consider restricting access to the account creation feature until a fix is available, and avoid using the FirstIndex field in the JSON data for account creation. As a temporary workaround, restrict user privileges to prevent exploitation.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-24355

Affected Products

Zyxel Vmg5313-B30B

References · 5

• 🔥 https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B · Exploit
• 🔥 https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2 · Exploit
• https://zyxel.com/support/security_advisories.shtml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-24355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24355 · Security Note