CVE-2020-14461

published 2020-06-22

CVE-2020-14461: Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.

Priority P2 62 high 8.6 CVSS 3.1

AV N AC L PR N UI N S C C H I N A N

EXPLOIT

Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
zyxel	wap6806_firmware	—	—

Detection & IOCs extracted from sources · hover to see the quote

url https://TARGET/Zyxel/images/eaZy/↗

path /Zyxel/images/eaZy/↗

• → Detect HTTP GET requests targeting the directory traversal path /Zyxel/images/eaZy/ on Zyxel Armor X1 WAP6806 devices ↗
• → Flag directory traversal attempts via the images/eaZy/ URI as described in the CVE ↗

• · Vulnerability is confirmed only on firmware version V1.00(ABAL.6)C0 of the Zyxel Armor X1 WAP6806 ↗

CVSS provenance

nvd v3.1 8.6 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22