CVE-2019-9955

Published: 22/04/2019 Updated: 30/04/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zyxel atp200_firmware 4.31
zyxel atp500_firmware 4.31
zyxel atp800_firmware 4.31
zyxel usg20-vpn_firmware 4.31
zyxel usg20w-vpn_firmware 4.31
zyxel usg40_firmware 4.31
zyxel usg40w_firmware 4.31
zyxel usg60_firmware 4.31
zyxel usg60w_firmware 4.31
zyxel usg110_firmware 4.31
zyxel usg210_firmware 4.31
zyxel usg310_firmware 4.31
zyxel usg1100_firmware 4.31
zyxel usg1900_firmware 4.31
zyxel usg2200-vpn_firmware 4.31
zyxel zywall_110_firmware 4.31
zyxel zywall_310_firmware 4.31
zyxel zywall_1100_firmware 4.31
zyxel vpn50_firmware -
zyxel vpn100_firmware -
zyxel vpn300_firmware -

# Exploit Title: Reflected XSS on Zyxel login pages # Date: 10 Apr 2019 # Exploit Author: Aaron Bishop # Vendor Homepage: wwwzyxelcom/us/en/ # Version: V431 # Tested on: ZyWall 310, ZyWall 110, USG1900, ATP500, USG40 - weblogincgi, webauth_relogincgi # CVE : 2019-9955 1 Description ============== Several Zyxel devices are vulnerable ...

Numerous Zyxel devices are vulnerable to a reflected XSS issue on the login page The mp_idx parameter is included in the page unsanitized A request such a $RHOST/?mobile=1&mp_idx=%22;alert(1);// Will trigger an alert, demonstrating the issue A call to getScript() can be used to include a full external JavaScript file to capture ...

CWE-79 https://www.zyxel.com/support/reflected-cross-site-scripting-vulnerability-of-firewalls.shtml https://www.securitymetrics.com/blog/Zyxel-Devices-Vulnerable-Cross-Site-Scripting-Login-page https://www.exploit-db.com/exploits/46706/http://seclists.org/fulldisclosure/2019/Apr/22 http://packetstormsecurity.com/files/152525/Zyxel-ZyWall-Cross-Site-Scripting.html https://nvd.nist.gov http://seclists.org/fulldisclosure/2019/Apr/22 https://www.exploit-db.com/exploits/46706

CVE-2019-9955

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect