Zyxel n300 Netusb Nbg-419n vulnerabilities

4 CVEs affecting Zyxel n300 Netusb Nbg-419n, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0356, published 2014-04-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0356, published 2014-04-15. High severity, CVSS 7.9. EPSS: 1.1% chance of exploitation in the next 30 days. The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters in input to the (1) detectWeather, (2)…
CVE-2014-0353, published 2014-04-15. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to bypass authentication by using %2F sequences in place of / (slash) characters.
CVE-2014-0354, published 2014-04-15. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password of qweasdzxc for an unspecified account, which allows remote attackers to obtain index.asp login…
CVE-2014-0355, published 2014-04-15. High severity, CVSS 7.9. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers to execute arbitrary code via (1) a long temp…