CVE-2017-17550

ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently be used for stored XSS...

CVE-2017-17550

ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently be used for stored XSS...

CVE-2017-17550

The vulnerability is in ZyXEL ZyWALL USG devices (2.12 AQQ.2 and 3.30 AQQ.7) where a CSRF flaw in the cgi-bin/zysh-cgi cmd action allows an attacker to add a user account. This newly created account could subsequently be used to perform stored XSS, as described in multiple sources. Affected softw...

CVE-2017-17550

ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently be used for stored XSS...

ZyXEL ZyWALL/USG Series Device Information Disclosure Vulnerability

ZyXEL ZyWALL/USG is a network security firewall appliance from Hopkins ZyXEL Technology. A security vulnerability exists in the Internet Key Exchange IKE handshake implementation used for IPsec-based VPN connections in the ZyXEL ZyWALL/USG series devices. An attacker can exploit the vulnerability...

The vulnerability of the IKE protocol implementation in ZyXEL USG, ZyXEL USG VPN, ZyWALL, and ZyWALL VPN devices allows attackers to gain access to protected information.

The vulnerability of the IKE protocol in network devices such as ZyXEL USG, ZyXEL USG VPN, ZyWALL, and ZyWALL VPN relates to decoding errors in traffic. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

CVE-2018-9129

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange IKE handshake implementation used for IPsec based VPN connections...

Design/Logic Flaw

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange IKE handshake implementation used for IPsec based VPN connections...

CVE-2018-9129

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange IKE handshake implementation used for IPsec based VPN connections...

CVE-2018-9129

CVE-2018-9129 affects ZyXEL ZyWALL/USG series devices, where the Bleichenbacher RSA padding oracle in the IKE handshake (IKEv1) can allow an attacker to derive IKE session data used for IPsec VPNs. The underlying issue is Bleichenbacher-style exploitation of RSA-encrypted nonces/authentication in...

CVE-2018-9129

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange IKE handshake implementation used for IPsec based VPN connections...

Zyxel ZyWALL ZLD 4.30 Cross Site Scripting Vulnerability

Exploit for hardware platform in category web applications ======================================================================= title: Reflected Cross-Site Scripting product: Zyxel ZyWALL: see "Vulnerable / tested version" vulnerable version: ZLD 4.30 and before fixed version: ZLD 4.31 CVE...

Zyxel ZyWALL ZLD 4.30 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected Cross-Site Scripting product: Zyxel ZyWALL: see "Vulnerable / tested version" vulnerable version: ZLD 4.30 and before fixed version: ZLD 4.31 CVE number: -...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to intercept network traffic.

The Zyxel ZyWALL USG 300 network interface card/mesh router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting traffic processed by this router through ARP spoofing attacks...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to escalate their privileges.

Exploiting a vulnerability in the operating system of the Zyxel ZyWALL USG 300 network interface card allows a malicious actor to upload and download device configuration files without additional authentication. As a result, the malicious actor can view or modify the administrator’s password...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to execute arbitrary code on the web server.

Exploiting a vulnerability in the operating system of the Zyxel ZyWALL USG 300 network firewall/switch allows a malicious actor to inject any desired web script through the Referer header. This is done by improperly handling the “404” error page, thereby compromising the integrity of data process...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to trigger a service failure.

The Apache HTTP Server, which is part of the Zyxel ZyWALL USG 300 network interface/router, incorrectly handles HTTP requests with modified Range fields. As a result, the device stops responding to HTTP requests...

ZyXEL ZyWALL USG client side authorization config disclosure

Details ======= Product: ZyXEL USG Unified Security Gateway appliances ZyWALL USG-20 ZyWALL USG-20W ZyWALL USG-50 ZyWALL USG-100 ZyWALL USG-200 ZyWALL USG-300 ZyWALL USG-1000 ZyWALL USG-1050 ZyWALL USG-2000 Possibly other ZLD-based products Affected Versions: Firmware Releases before April 25, 20...

ZyWALL USG - Appliance Multiple Vulnerabilities

No description provided by source...

ZyXEL ZyWALL 2 3.62 Forms/General_1 sysSystemName Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25262/info ZyXEL ZyWALL 2 is prone to multiple remote vulnerabilities that affect the management interface. An attacker can exploit these issues to carry out cross-site request forgery, HTML-injection, and denial-of-servi...