Authentication flaw

2019-10-0912:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify data fields of the page.

CPENameOperatorVersion
nbg-418n_v2_firmwareeq1.0.0-aarp.9-c0

CPE	Name	Operator	Version
	nbg-418n_v2_firmware	eq	1.0.0-aarp.9-c0

References

github.com/d0x0/Zyxel-NBG-418N-v2/blob/master/CVE-2019-17354

www.zyxel.com/us/en/