Zyxel Nbg-418n Firmware vulnerabilities

8 CVEs affecting Zyxel Nbg-418n Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22924, published 2023-05-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7283, published 2015-12-31. High severity, CVSS 8.1. EPSS: 3.7% chance of exploitation in the next 30 days. The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 has a default password of 1234 for the admin account, which allows remote attackers to obtain administrative…
CVE-2019-6710, published 2019-03-07. High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days. Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.
CVE-2015-7284, published 2015-12-31. High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 allows remote attackers to hijack the authentication of arbitrary users.
CVE-2023-22922, published 2023-05-01. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets…
CVE-2023-22924, published 2023-05-01. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to cause…
CVE-2023-22923, published 2023-05-01. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker to cause denial-of-service (DoS) conditions…
CVE-2023-22921, published 2023-05-01. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store…
CVE-2022-45441, published 2023-02-07. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a…