The vulnerabilities of the microprogrammed software of ZyXEL routers of the USG, UAG, ATP, VPN, and NXC series allow attackers to cause service failures or gain unauthorized access to protected information.

🗓️ 16 Apr 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 14 Views

ZyXEL router software flaws in USG UAG ATP VPN NXC series enable disruption or unauthorized access via input validation.

Vulners

Node

zyxel_communications usg2200-vpnMatch4.33

OR

zyxel_communications uag2100Match4.18

OR

zyxel_communications uag4100Match4.18

OR

zyxel_communications usg110Range≤4.33

OR

zyxel_communications usg210Range≤4.33

OR

zyxel_communications usg310Range≤4.33

OR

zyxel_communications usg1100Range≤4.33

OR

zyxel_communications usg1900Range≤4.33

OR

zyxel_communications usg2200Range≤4.33

OR

zyxel_communications nxc2500Range≤5.40

OR

zyxel_communications nxc5500Range≤5.40

OR

zyxel_communications usg40Range≤4.33

OR

zyxel_communications usg40wRange≤4.33

OR

zyxel_communications usg60Range≤4.33

OR

zyxel_communications usg60wRange≤4.33

OR

zyxel_communications usg20-vpnRange≤4.33

OR

zyxel_communications usg20w-vpnRange≤4.33

OR

zyxel_communications vpn50Range≤10.02

OR

zyxel_communications vpn100Range≤10.02

OR

zyxel_communications vpn300Range≤10.02

Source	Link
securitylab	www.securitylab.ru/news/500816.php
zyxel	www.zyxel.com/support/web-CGI-vulnerability-of-gateways-and-access-point-controllers.shtml

16 Apr 2020 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 39.1

CVSS 29.4

ZyXEL routers router software flaws input validation service disruption unauthorized access