CVE-2018-15602: XSS
Published Aug 26, 2018
·Updated
Zyxel VMG3312 B10B devices are affected by a persistent XSS vulnerability via the pages/connectionStatus/connectionStatus-hostEntry.cmd hostname parameter.
Affected Software
2 affected components
Zyxel Vmg3312 B10b Firmware
Zyxel VMG3312 B10B
Event History
Aug 26, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-15602?
CVE-2018-15602 has been classified as a high severity persistent XSS vulnerability.
2
How do I fix CVE-2018-15602?
To fix CVE-2018-15602, Zyxel users should upgrade to the latest firmware version that addresses this vulnerability.
3
Which Zyxel devices are affected by CVE-2018-15602?
CVE-2018-15602 specifically affects Zyxel VMG3312 B10B devices.
4
What is the nature of the vulnerability in CVE-2018-15602?
CVE-2018-15602 is a persistent XSS vulnerability that allows an attacker to inject arbitrary scripts via the hostname parameter.
5
Can CVE-2018-15602 be exploited remotely?
Yes, CVE-2018-15602 can be exploited remotely if the attacker has access to the affected Zyxel device's web interface.