Search
Find a vulnerability
Search criteria
4 vulnerabilities found for vmg5313-b30b_firmware by zyxel
CVE-2020-24355 (GCVE-0-2020-24355)
Vulnerability from nvd – Published: 2020-09-02 11:15 – Updated: 2024-08-04 15:12
VLAI
EPSS
VEX
Summary
Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing "FirstIndex" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.zyxel.com/support/security_advisories.shtml | x_refsource_MISC |
| https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B | x_refsource_MISC |
| https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T15:12:08.714Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing \"FirstIndex\" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-09-02T11:15:09.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-24355",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing \"FirstIndex\" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.zyxel.com/support/security_advisories.shtml",
"refsource": "MISC",
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"name": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B",
"refsource": "MISC",
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
},
{
"name": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2",
"refsource": "MISC",
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-24355",
"datePublished": "2020-09-02T11:15:09.000Z",
"dateReserved": "2020-08-13T00:00:00.000Z",
"dateUpdated": "2024-08-04T15:12:08.714Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-24354 (GCVE-0-2020-24354)
Vulnerability from nvd – Published: 2020-08-31 17:38 – Updated: 2024-08-04 15:12
VLAI
EPSS
VEX
Summary
Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.zyxel.com/support/security_advisories.shtml | x_refsource_MISC |
| https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T15:12:08.535Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-08-31T17:38:42.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-24354",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.zyxel.com/support/security_advisories.shtml",
"refsource": "MISC",
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"name": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B",
"refsource": "MISC",
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-24354",
"datePublished": "2020-08-31T17:38:42.000Z",
"dateReserved": "2020-08-13T00:00:00.000Z",
"dateUpdated": "2024-08-04T15:12:08.535Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-24355 (GCVE-0-2020-24355)
Vulnerability from cvelistv5 – Published: 2020-09-02 11:15 – Updated: 2024-08-04 15:12
VLAI
EPSS
VEX
Summary
Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing "FirstIndex" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.zyxel.com/support/security_advisories.shtml | x_refsource_MISC |
| https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B | x_refsource_MISC |
| https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T15:12:08.714Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing \"FirstIndex\" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-09-02T11:15:09.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-24355",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing \"FirstIndex\" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.zyxel.com/support/security_advisories.shtml",
"refsource": "MISC",
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"name": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B",
"refsource": "MISC",
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
},
{
"name": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2",
"refsource": "MISC",
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-24355",
"datePublished": "2020-09-02T11:15:09.000Z",
"dateReserved": "2020-08-13T00:00:00.000Z",
"dateUpdated": "2024-08-04T15:12:08.714Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-24354 (GCVE-0-2020-24354)
Vulnerability from cvelistv5 – Published: 2020-08-31 17:38 – Updated: 2024-08-04 15:12
VLAI
EPSS
VEX
Summary
Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.zyxel.com/support/security_advisories.shtml | x_refsource_MISC |
| https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T15:12:08.535Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-08-31T17:38:42.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-24354",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.zyxel.com/support/security_advisories.shtml",
"refsource": "MISC",
"url": "https://www.zyxel.com/support/security_advisories.shtml"
},
{
"name": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B",
"refsource": "MISC",
"url": "https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-24354",
"datePublished": "2020-08-31T17:38:42.000Z",
"dateReserved": "2020-08-13T00:00:00.000Z",
"dateUpdated": "2024-08-04T15:12:08.535Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}