PT-2019-12872

Name of the Vulnerable Software and Affected Versions Zyxel UAG, USG, and ZyWall devices affected versions not specified Description The issue concerns a Missing Access Control in the "Free Time" component, allowing a remote attacker to generate guest accounts by directly accessing the account...

CVE-2019-12581: Improper Neutralization of Input During Web Page Generation

A reflective Cross-site scripting XSS vulnerability in the freetimefailed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...

CVE-2019-12583: Direct Request

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service...

PT-2019-4961

Name of the Vulnerable Software and Affected Versions ZyXEL USG, UAG, ATP, VPN, and NXC series affected versions not specified Description The issue is related to insufficient input validation in the firmware of ZyXEL routers. This can be exploited by a remote attacker to cause a denial of servic...