zyxel Vulnerability Advisory Catalog

Total 308 security vulnerabilities recorded for zyxel software and firmware.

← Back to All Vendors
Component: pk5001z_firmware

ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account passwor...

📅 2017-07-25
CVSS 8.8 Dossier →
CVE-2017-7964 CRITICAL
Component: wre6505_firmware

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DN...

📅 2017-04-19
CVSS 10.0 Dossier →
Component: emg2926_firmware

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the d...

📅 2017-04-06
CVSS 8.8 Dossier →
Component: usg50_firmware

Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a flood of ICMPv4 ...

📅 2017-02-21
CVSS 7.5 Dossier →
Component: gs1900-10hp_firmware

Cisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers to cause ...

📅 2016-03-03
CVSS 7.5 Dossier →
CVE-2016-1317 MEDIUM
Component: gs1900-10hp_firmware

Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name infor...

📅 2016-02-09
CVSS 4.3 Dossier →
CVE-2016-1307 MEDIUM
Component: gs1900-10hp_firmware

The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it ea...

📅 2016-02-07
CVSS 5.4 Dossier →
Component: gs1900-10hp_firmware

Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of serv...

📅 2016-02-07
CVSS 7.5 Dossier →
Component: gs1900-10hp_firmware

Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication...

📅 2015-12-31
CVSS 8.8 Dossier →
CVE-2015-5989 CRITICAL
Component: gs1900-10hp_firmware

Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administ...

📅 2015-12-31
CVSS 9.8 Dossier →
CVE-2015-5988 CRITICAL
Component: gs1900-10hp_firmware

The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administr...

📅 2015-12-31
CVSS 9.8 Dossier →
Component: gs1900-10hp_firmware

Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easie...

📅 2015-12-31
CVSS 8.6 Dossier →
Component: nbg-418n_firmware

Cross-site request forgery (CSRF) vulnerability on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 allows remote attackers to hijack the authentic...

📅 2015-12-31
CVSS 8.0 Dossier →
Component: nbg-418n_firmware

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 has a default password of 1234 for the admin account, which al...

📅 2015-12-31
CVSS 8.1 Dossier →
Component: pmg5318-b20a_firmware

ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative privileges by leveraging access to the ...

📅 2015-12-31
CVSS 8.0 Dossier →
Component: pmg5318-b20a_firmware

The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate sessions upon a logout action, which allows remote at...

📅 2015-12-31
CVSS 8.5 Dossier →
CVE-2015-6018 CRITICAL
Component: pmg5318-b20a_firmware

The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary comm...

📅 2015-12-31
CVSS 9.8 Dossier →
CVE-2015-6017 MEDIUM
Component: p-660hw-t1_v2_firmware

Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attac...

📅 2015-12-31
CVSS 6.1 Dossier →
CVE-2015-6016 CRITICAL
Component: nbg-418n

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default passwo...

📅 2015-12-31
CVSS 9.8 Dossier →
CVE-2014-7278 UNKNOWN
Component: sbg3300-n_firmware

The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to cause a denial of service (p...

📅 2014-10-04
CVSS 5.0 Dossier →
CVE-2014-7277 UNKNOWN
Component: sbg3300-n_firmware

Cross-site scripting (XSS) vulnerability in the login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remo...

📅 2014-10-04
CVSS 4.3 Dossier →
CVE-2014-4162 UNKNOWN
Component: p-660hw

Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentic...

📅 2014-06-16
CVSS 6.8 Dossier →
CVE-2014-0356 UNKNOWN
Component: n300_netusb_nbg-419n_firmware

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters ...

📅 2014-04-15
CVSS 7.9 Dossier →
CVE-2014-0355 UNKNOWN
Component: n300_netusb_nbg-419n_firmware

Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers ...

📅 2014-04-15
CVSS 7.9 Dossier →
Page 11 of 13 (308 Total Records)