CVE-2015-7284

Cross-site request forgery CSRF vulnerability on ZyXEL NBG-418N devices with firmware 1.00AADZ.3C0 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7283

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00AADZ.3C0 has a default password of 1234 for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

Default credentials

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00AADZ.3C0 has a default password of 1234 for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-7283

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00AADZ.3C0 has a default password of 1234 for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-7284

CVE-2015-7284 describes a CSRF vulnerability in ZyXEL NBG-418N devices running firmware 1.00(AADZ.3)C0. An attacker can hijack the authentication of arbitrary users via forged requests, potentially executing actions with the victim’s session privileges. Documented impact includes remote attacker ...