Please note that the table below does NOT include customized models for internet service providers (ISPs). If a product is not listed, it is not affected or has reached end-of-life. What versions are vulnerable-and what should you do?Īfter a thorough investigation, we’ve identified the affected products that are within their warranty and support period, as shown in the table below.
Command injection vulnerabilities were found in the diagnostic tool and the certificate upload interface of the devices.What is the vulnerabilities There are eight vulnerabilities, identified as follows. Zyxel is aware of multiple vulnerabilities reported by our security consultancy partner, SEC Consult, and advises users to install the applicable firmware updates for optimal protection. Insufficiently protected credentials in the configuration file of the devices could allow an attacker to retrieve the passwords. Zyxel security advisory for multiple vulnerabilities Summary.The CGI program lacks a proper permission control mechanism, which could allow an attacker to read sensitive files on the devices.Multiple buffer overflow vulnerabilities were discovered in the web server of the affected devices.There are eight vulnerabilities, identified as follows. Zyxel security advisory for multiple vulnerabilities Summary
0 kommentar(er)
