Zyxel PMG5318-b20a Firmware vulnerabilities

5 CVEs affecting Zyxel PMG5318-b20a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7256, published 2017-09-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-6018, published 2015-12-31. Critical severity, CVSS 9.8. EPSS: 20.8% chance of exploitation in the next 30 days. The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.
CVE-2015-6016, published 2015-12-31. Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days. ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows…
CVE-2015-6019, published 2015-12-31. High severity, CVSS 8.5. EPSS: 3% chance of exploitation in the next 30 days. The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate sessions upon a logout action, which allows remote attackers to bypass intended access restrictions by…
CVE-2015-6020, published 2015-12-31. High severity, CVSS 8.0. EPSS: 2.2% chance of exploitation in the next 30 days. ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative privileges by leveraging access to the user account.
CVE-2015-7256, published 2017-09-28. Medium severity, CVSS 5.9. EPSS: 0.8% chance of exploitation in the next 30 days. ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A,…