CVE-2022-45441

published 2023-02-07

CVE-2022-45441: A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious…

Priority P4 25 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a vulnerable device. A successful XSS attack could force an authenticated user to execute the stored malicious scripts and then result in a denial-of-service (DoS) condition when the user visits the Logs page of the GUI on the device.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
zyxel	nbg-418n_firmware	<= 1.00\(aarp.10\)c0	—
zyxel	nbg-418n_v2_firmware	< V1.00(AARP.13)C0	V1.00(AARP.13)C0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79