VAR-201904-0115
Vulnerability from variot - Updated: 2024-11-23 23:04On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter. plural ZyXEL The product contains a cross-site scripting vulnerability.Information may be obtained and information may be altered. ZyXELZyWall310 and other products are all products of ZyXEL Corporation of Taiwan, China. ZyXELZyWall310 is a 310 series VPN firewall device. ZyXELZyWall110 is a 110 series VPN firewall device. The ZyXELUSG1900 is a next-generation unified security gateway device. A cross-site scripting vulnerability exists in several Zyxel products that stems from the lack of proper validation of client data by web applications. An attacker could exploit the vulnerability to execute client code. ZyXEL ZyWall 310, etc. The following products are affected: Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, Zy0WALL
Show details on source website{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "usg110",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg60w",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg60",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg40w",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg40",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg20w-vpn",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg20-vpn",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "atp800",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "atp500",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "atp200",
"scope": null,
"trust": 1.4,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg20w-vpn",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "zywall 310",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg110",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg1100",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "zywall 1100",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg2200-vpn",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "atp500",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg40w",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "atp200",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg40",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "vpn300",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "zywall 110",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg1900",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg20-vpn",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg60",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "vpn50",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "vpn100",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "atp800",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg60w",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg310",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "usg210",
"scope": "eq",
"trust": 1.0,
"vendor": "zyxel",
"version": "4.31"
},
{
"_id": null,
"model": "nbg-418n modem",
"scope": "eq",
"trust": 0.6,
"vendor": "zyxel",
"version": "v2"
},
{
"_id": null,
"model": "nas",
"scope": "eq",
"trust": 0.6,
"vendor": "zyxel",
"version": "326"
},
{
"_id": null,
"model": "usg1100",
"scope": null,
"trust": 0.6,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg310",
"scope": null,
"trust": 0.6,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg210",
"scope": null,
"trust": 0.6,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "zywall",
"scope": "eq",
"trust": 0.6,
"vendor": "zyxel",
"version": "1100"
},
{
"_id": null,
"model": "zywall",
"scope": "eq",
"trust": 0.6,
"vendor": "zyxel",
"version": "310"
},
{
"_id": null,
"model": "zywall",
"scope": "eq",
"trust": 0.6,
"vendor": "zyxel",
"version": "110"
},
{
"_id": null,
"model": "usg2200-vpn",
"scope": null,
"trust": 0.6,
"vendor": "zyxel",
"version": null
},
{
"_id": null,
"model": "usg1900",
"scope": null,
"trust": 0.6,
"vendor": "zyxel",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13778"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
},
{
"db": "NVD",
"id": "CVE-2019-9955"
}
]
},
"configurations": {
"_id": null,
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:zyxel:atp200_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:atp500_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:atp800_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:usg110_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:usg20-vpn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:usg20w-vpn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:usg40_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:usg40w_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:usg60_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:zyxel:usg60w_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
}
]
},
"credits": {
"_id": null,
"data": "Aaron Bishop",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-785"
}
],
"trust": 0.6
},
"cve": "CVE-2019-9955",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CVE-2019-9955",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CNVD-2019-13778",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-161390",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 2.8,
"id": "CVE-2019-9955",
"impactScore": 2.7,
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"trust": 1.8,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-9955",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2019-9955",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2019-13778",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201904-785",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-161390",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2019-9955",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13778"
},
{
"db": "VULHUB",
"id": "VHN-161390"
},
{
"db": "VULMON",
"id": "CVE-2019-9955"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-785"
},
{
"db": "NVD",
"id": "CVE-2019-9955"
}
]
},
"description": {
"_id": null,
"data": "On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized \u0027mp_idx\u0027 parameter. plural ZyXEL The product contains a cross-site scripting vulnerability.Information may be obtained and information may be altered. ZyXELZyWall310 and other products are all products of ZyXEL Corporation of Taiwan, China. ZyXELZyWall310 is a 310 series VPN firewall device. ZyXELZyWall110 is a 110 series VPN firewall device. The ZyXELUSG1900 is a next-generation unified security gateway device. A cross-site scripting vulnerability exists in several Zyxel products that stems from the lack of proper validation of client data by web applications. An attacker could exploit the vulnerability to execute client code. ZyXEL ZyWall 310, etc. The following products are affected: Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, Zy0WALL ",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-9955"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
},
{
"db": "CNVD",
"id": "CNVD-2019-13778"
},
{
"db": "VULHUB",
"id": "VHN-161390"
},
{
"db": "VULMON",
"id": "CVE-2019-9955"
}
],
"trust": 2.34
},
"exploit_availability": {
"_id": null,
"data": [
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=46706",
"trust": 0.1,
"type": "exploit"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2019-9955"
}
]
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2019-9955",
"trust": 3.2
},
{
"db": "PACKETSTORM",
"id": "152525",
"trust": 1.8
},
{
"db": "EXPLOIT-DB",
"id": "46706",
"trust": 1.8
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201904-785",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2019-13778",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-161390",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2019-9955",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13778"
},
{
"db": "VULHUB",
"id": "VHN-161390"
},
{
"db": "VULMON",
"id": "CVE-2019-9955"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-785"
},
{
"db": "NVD",
"id": "CVE-2019-9955"
}
]
},
"id": "VAR-201904-0115",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13778"
},
{
"db": "VULHUB",
"id": "VHN-161390"
}
],
"trust": 1.2644510616666667
},
"iot_taxonomy": {
"_id": null,
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13778"
}
]
},
"last_update_date": "2024-11-23T23:04:48.660000Z",
"patch": {
"_id": null,
"data": [
{
"title": "Zyxel security advisory for reflected cross-site scripting vulnerability of firewalls",
"trust": 0.8,
"url": "https://www.zyxel.com/support/reflected-cross-site-scripting-vulnerability-of-firewalls.shtml"
},
{
"title": "CVEs",
"trust": 0.1,
"url": "https://github.com/irbishop/CVEs "
},
{
"title": "CVEs",
"trust": 0.1,
"url": "https://github.com/irbishop/CVE "
},
{
"title": "nuclei-templates",
"trust": 0.1,
"url": "https://github.com/storenth/nuclei-templates "
},
{
"title": "kenzer-templates",
"trust": 0.1,
"url": "https://github.com/Elsfa7-110/kenzer-templates "
},
{
"title": "kenzer-templates",
"trust": 0.1,
"url": "https://github.com/ARPSyndicate/kenzer-templates "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2019-9955"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-79",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-161390"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
},
{
"db": "NVD",
"id": "CVE-2019-9955"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 2.6,
"url": "https://www.securitymetrics.com/blog/zyxel-devices-vulnerable-cross-site-scripting-login-page"
},
{
"trust": 2.4,
"url": "http://seclists.org/fulldisclosure/2019/apr/22"
},
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/152525/zyxel-zywall-cross-site-scripting.html"
},
{
"trust": 1.8,
"url": "https://www.zyxel.com/support/reflected-cross-site-scripting-vulnerability-of-firewalls.shtml"
},
{
"trust": 1.8,
"url": "https://www.exploit-db.com/exploits/46706/"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-9955"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9955"
},
{
"trust": 0.7,
"url": "https://www.exploit-db.com/exploits/46706"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/79.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://github.com/irbishop/cves"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13778"
},
{
"db": "VULHUB",
"id": "VHN-161390"
},
{
"db": "VULMON",
"id": "CVE-2019-9955"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-785"
},
{
"db": "NVD",
"id": "CVE-2019-9955"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-13778",
"ident": null
},
{
"db": "VULHUB",
"id": "VHN-161390",
"ident": null
},
{
"db": "VULMON",
"id": "CVE-2019-9955",
"ident": null
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004359",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-201904-785",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2019-9955",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2019-05-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-13778",
"ident": null
},
{
"date": "2019-04-22T00:00:00",
"db": "VULHUB",
"id": "VHN-161390",
"ident": null
},
{
"date": "2019-04-22T00:00:00",
"db": "VULMON",
"id": "CVE-2019-9955",
"ident": null
},
{
"date": "2019-05-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-004359",
"ident": null
},
{
"date": "2019-04-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201904-785",
"ident": null
},
{
"date": "2019-04-22T20:29:00.447000",
"db": "NVD",
"id": "CVE-2019-9955",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2019-05-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-13778",
"ident": null
},
{
"date": "2019-04-30T00:00:00",
"db": "VULHUB",
"id": "VHN-161390",
"ident": null
},
{
"date": "2019-04-30T00:00:00",
"db": "VULMON",
"id": "CVE-2019-9955",
"ident": null
},
{
"date": "2019-05-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-004359",
"ident": null
},
{
"date": "2019-04-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201904-785",
"ident": null
},
{
"date": "2024-11-21T04:52:39.943000",
"db": "NVD",
"id": "CVE-2019-9955",
"ident": null
}
]
},
"title": {
"_id": null,
"data": "plural ZyXEL Product cross-site scripting vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004359"
}
],
"trust": 0.8
},
"type": {
"_id": null,
"data": "XSS",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-785"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…