CVE-2011-0746: Zyxel o2 DSL Router Classic

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the PortRule_Name parameter.

Affected products

• Zyxel o2 DSL Router Classic: any version

Published 2011-04-13. Last modified 2026-06-16.