CVE-2022-0823

🗓️ 07 Jun 2022 01:10:12Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 95 Views

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack

Reporter	Title	Published	Views	Family All 12
attackerkb	CVE-2022-0823	9 Jun 202216:15	–	attackerkb
BDU FSTEC	The vulnerability of Zyxel GS1200 series switch microprogramming software, related to information disclosure due to inconsistencies, allows attackers to gain unauthorized access to protected information.	29 Jun 202200:00	–	bdu_fstec
CNNVD	Zyxel GS1200 安全漏洞	8 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-0823	7 Jun 202201:10	–	cvelist
EUVD	EUVD-2022-15871	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0823	9 Jun 202216:15	–	nvd
OSV	CVE-2022-0823	9 Jun 202216:15	–	osv
Prion	Information disclosure	9 Jun 202216:15	–	prion
Positive Technologies	PT-2022-3215 · Zyxel · Zyxel Gs1200	7 Jun 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-0823: Observable Discrepancy	7 Jun 202200:00	–	rapid7

NVD

Node

AND

zyxel gs1200-5_firmwareRange<2.00(abkm.1)

zyxel gs1200-5Match-

Node

AND

zyxel gs1200-5hp_firmwareRange<2.00(abkn.1)

zyxel gs1200-5hpMatch-

Node

AND

zyxel gs1200-8_firmwareRange<2.00(abme.1)

zyxel gs1200-8Match-

Node

AND

zyxel gs1200-8hp_firmwareRange<2.00(abmf.1)

zyxel gs1200-8hpMatch-

[
  {
    "product": "Zyxel GS1200 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "2.00 Patch 1"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/support/Zyxel-security-advisory-for-password-guessing-vulnerability-of-GS1200-series-switches.shtml

17 Jun 2026 04:21Current

6.4Medium risk

Vulners AI Score6.4

CVSS 22.1

CVSS 3.16.2

EPSS0.00225

CWE-203