Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Zyxel Component: Nbg-418n Firmware Clear all filters
TI-2023-09062 CVE-2023-22924 · GHSA-h4h8-xpg4-95fv

Buffer overflow in Zyxel NBG-418N v2 firmware

Priority LOW 24

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to cause denial-of-service (DoS) conditions b…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.008 Published 2023-05-01 Fixed in V1.00(AARP.14)C0 CWE-120
TI-2023-09061 CVE-2023-22923 · GHSA-fggw-7j3v-3jcw

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions…

Priority LOW 30

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker to cause denial-of-service (DoS) conditions on an affected device…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00788 Published 2023-05-01 Fixed in V1.00(AARP.14)C0 CWE-134
TI-2023-09060 CVE-2023-22922 · GHSA-gchg-8x7r-rq44

Buffer overflow in Zyxel NBG-418N v2 firmware

Priority MEDIUM 41

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled o…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00933 Published 2023-05-01 Fixed in V1.00(AARP.14)C0 CWE-120
TI-2023-09059 CVE-2023-22921 · GHSA-8rhh-pq82-8f6m

Cross-site scripting in Zyxel NBG-418N v2 firmware

Priority LOW 33

A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malicious scripts using a…

CVSS 3.1HIGH 7.5 Network High privileges User interaction EPSS 0.00502 Published 2023-05-01 Fixed in V1.00(AARP.14)C0 CWE-79
TI-2022-22407 CVE-2022-45441 · GHSA-xcqv-8q74-7h3x

Cross-site scripting in Zyxel NBG-418N v2 firmware

Priority LOW 27

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a vulnerable device.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-02-07 Fixed in V1.00(AARP.13)C0 CWE-79
TI-2015-06055 CVE-2015-7283 · GHSA-hwm3-9jxq-929g

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0…

Priority MEDIUM 42

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 has a default password of 1234 for the admin account, which allows remote attackers to obtain administrative privileges by leveragin…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.03715 Published 2015-12-31 No fix listed CWE-255