CVE-2019-17354: Critical severity zyxel nbg-418n v2 firmware vulnerability
Published Oct 9, 2019
·Updated
wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify data fields of the page.
Affected Software
2 affected components
Zyxel Nbg-418n V2 Firmware=1.00\(aarp.9\)c0
Zyxel NBG-418N v2
Event History
Oct 9, 2019
CVE Published
via MITRE·11:57 AM
Data Sourced
via MITRE·11:57 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-17354?
CVE-2019-17354 has a medium severity rating due to potential unauthorized access to sensitive information.
2
How do I fix CVE-2019-17354?
To mitigate CVE-2019-17354, update the Zyxel NBG-418N v2 firmware to the latest version that addresses this vulnerability.
3
What type of information can be exposed by CVE-2019-17354?
CVE-2019-17354 can lead to the disclosure of configuration details about the WAN interface.
4
Can an attacker exploit CVE-2019-17354 remotely?
Yes, an attacker can exploit CVE-2019-17354 remotely without any authentication.
5
Which devices are affected by CVE-2019-17354?
CVE-2019-17354 affects the Zyxel NBG-418N v2 with firmware version 1.00(AARP.9)C0.