Lucene search
K

The vulnerability of the microprogramming software used in Zyxel Ethernet switches such as ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 lies in the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.

🗓️ 17 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 3 Views

Zyxel microprogramming software permits cross-site scripting from website structure mp_idx.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
0day.today
Zyxel ZyWall 310 / ZyWall 110 / USG1900 / ATP500 / USG40 - Login Page Cross-Site Scripting
16 Apr 201900:00
zdt
CNVD
Cross-Site Scripting Vulnerabilities in Multiple ZyXEL Products
17 Apr 201900:00
cnvd
CVE
CVE-2019-9955
22 Apr 201919:38
cve
Cvelist
CVE-2019-9955
22 Apr 201919:38
cvelist
Nuclei
Zyxel - Cross-Site Scripting
11 Jun 202603:33
nuclei
NVD
CVE-2019-9955
22 Apr 201920:29
nvd
Packet Storm
Zyxel ZyWall Cross Site Scripting
16 Apr 201900:00
packetstorm
Prion
Cross site scripting
22 Apr 201920:29
prion

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Dec 2019 00:00Current
6.2Medium risk
Vulners AI Score6.2
CVSS 24.3
CVSS 36.1
EPSS0.10697
3