CVE-2019-9955: XSS
First published: Mon Apr 22 2019(Updated: )
On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zyxel Atp200 Firmware | =4.31 | |
| Zyxel ATP200 | ||
| Zyxel Atp500 Firmware | =4.31 | |
| Zyxel Atp500 | ||
| Zyxel Atp800 Firmware | =4.31 | |
| Zyxel Atp800 | ||
| Zyxel Usg20-vpn Firmware | =4.31 | |
| Zyxel Usg20-vpn | ||
| Zyxel Usg20w-vpn Firmware | =4.31 | |
| Zyxel Usg20w-vpn | ||
| Zyxel Usg40 Firmware | =4.31 | |
| Zyxel Usg40 | ||
| Zyxel Usg40w Firmware | =4.31 | |
| Zyxel Usg40w | ||
| Zyxel Usg60 Firmware | =4.31 | |
| Zyxel Usg60 | ||
| Zyxel Usg60w Firmware | =4.31 | |
| Zyxel Usg60w | ||
| Zyxel Usg110 Firmware | =4.31 | |
| Zyxel Usg110 | ||
| Zyxel Usg210 Firmware | =4.31 | |
| Zyxel Usg210 | ||
| Zyxel Usg310 Firmware | =4.31 | |
| Zyxel Usg310 | ||
| Zyxel Usg1100 Firmware | =4.31 | |
| Zyxel Usg1100 | ||
| Zyxel Usg1900 Firmware | =4.31 | |
| Zyxel Usg1900 | ||
| Zyxel Usg2200-vpn Firmware | =4.31 | |
| Zyxel Usg2200-vpn | ||
| Zyxel Zywall 110 Firmware | =4.31 | |
| Zyxel Zywall 110 | ||
| Zyxel Zywall 310 Firmware | =4.31 | |
| Zyxel Zywall 310 | ||
| Zyxel Zywall 1100 Firmware | =4.31 | |
| Zyxel Zywall 1100 | ||
| Zyxel Vpn50 Firmware | ||
| Zyxel Vpn50 | ||
| Zyxel Vpn100 Firmware | ||
| Zyxel Vpn100 | ||
| Zyxel Vpn300 Firmware | ||
| Zyxel Vpn300 | ||
| All of | ||
| Zyxel Atp200 Firmware | =4.31 | |
| Zyxel ATP200 | ||
| All of | ||
| Zyxel Atp500 Firmware | =4.31 | |
| Zyxel Atp500 | ||
| All of | ||
| Zyxel Atp800 Firmware | =4.31 | |
| Zyxel Atp800 | ||
| All of | ||
| Zyxel Usg20-vpn Firmware | =4.31 | |
| Zyxel Usg20-vpn | ||
| All of | ||
| Zyxel Usg20w-vpn Firmware | =4.31 | |
| Zyxel Usg20w-vpn | ||
| All of | ||
| Zyxel Usg40 Firmware | =4.31 | |
| Zyxel Usg40 | ||
| All of | ||
| Zyxel Usg40w Firmware | =4.31 | |
| Zyxel Usg40w | ||
| All of | ||
| Zyxel Usg60 Firmware | =4.31 | |
| Zyxel Usg60 | ||
| All of | ||
| Zyxel Usg60w Firmware | =4.31 | |
| Zyxel Usg60w | ||
| All of | ||
| Zyxel Usg110 Firmware | =4.31 | |
| Zyxel Usg110 | ||
| All of | ||
| Zyxel Usg210 Firmware | =4.31 | |
| Zyxel Usg210 | ||
| All of | ||
| Zyxel Usg310 Firmware | =4.31 | |
| Zyxel Usg310 | ||
| All of | ||
| Zyxel Usg1100 Firmware | =4.31 | |
| Zyxel Usg1100 | ||
| All of | ||
| Zyxel Usg1900 Firmware | =4.31 | |
| Zyxel Usg1900 | ||
| All of | ||
| Zyxel Usg2200-vpn Firmware | =4.31 | |
| Zyxel Usg2200-vpn | ||
| All of | ||
| Zyxel Zywall 110 Firmware | =4.31 | |
| Zyxel Zywall 110 | ||
| All of | ||
| Zyxel Zywall 310 Firmware | =4.31 | |
| Zyxel Zywall 310 | ||
| All of | ||
| Zyxel Zywall 1100 Firmware | =4.31 | |
| Zyxel Zywall 1100 | ||
| All of | ||
| Zyxel Vpn50 Firmware | ||
| Zyxel Vpn50 | ||
| All of | ||
| Zyxel Vpn100 Firmware | ||
| Zyxel Vpn100 | ||
| All of | ||
| Zyxel Vpn300 Firmware | ||
| Zyxel Vpn300 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/152525/Zyxel-ZyWall-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Apr/22
- https://www.exploit-db.com/exploits/46706/
- https://www.securitymetrics.com/blog/Zyxel-Devices-Vulnerable-Cross-Site-Scripting-Login-page
- https://www.zyxel.com/support/reflected-cross-site-scripting-vulnerability-of-firewalls.shtml
Frequently Asked Questions
What is CVE-2019-9955?
CVE-2019-9955 is a vulnerability that affects Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices.
What is the impact of CVE-2019-9955?
CVE-2019-9955 allows an attacker to execute arbitrary scripts in the context of a user's browser session, potentially allowing them to steal sensitive information or perform malicious actions.
How can I check if my device is affected by CVE-2019-9955?
Check if your Zyxel device is using firmware version 4.31, and if it belongs to one of the affected models listed in the CVE description.
How can I mitigate CVE-2019-9955?
Update your Zyxel device to the latest firmware version, which resolves the vulnerability.
Where can I find more information about CVE-2019-9955?
You can find more information about CVE-2019-9955 on the provided external references: packetstormsecurity.com, seclists.org, and exploit-db.com.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/zyxel
- canonical/zyxel atp200 firmware
- version/zyxel atp200 firmware/4.31
- canonical/zyxel atp200
- canonical/zyxel atp500 firmware
- version/zyxel atp500 firmware/4.31
- canonical/zyxel atp500
- canonical/zyxel atp800 firmware
- version/zyxel atp800 firmware/4.31
- canonical/zyxel atp800
- canonical/zyxel usg20-vpn firmware
- version/zyxel usg20-vpn firmware/4.31
- canonical/zyxel usg20-vpn
- canonical/zyxel usg20w-vpn firmware
- version/zyxel usg20w-vpn firmware/4.31
- canonical/zyxel usg20w-vpn
- canonical/zyxel usg40 firmware
- version/zyxel usg40 firmware/4.31
- canonical/zyxel usg40
- canonical/zyxel usg40w firmware
- version/zyxel usg40w firmware/4.31
- canonical/zyxel usg40w
- canonical/zyxel usg60 firmware
- version/zyxel usg60 firmware/4.31
- canonical/zyxel usg60
- canonical/zyxel usg60w firmware
- version/zyxel usg60w firmware/4.31
- canonical/zyxel usg60w
- canonical/zyxel usg110 firmware
- version/zyxel usg110 firmware/4.31
- canonical/zyxel usg110
- canonical/zyxel usg210 firmware
- version/zyxel usg210 firmware/4.31
- canonical/zyxel usg210
- canonical/zyxel usg310 firmware
- version/zyxel usg310 firmware/4.31
- canonical/zyxel usg310
- canonical/zyxel usg1100 firmware
- version/zyxel usg1100 firmware/4.31
- canonical/zyxel usg1100
- canonical/zyxel usg1900 firmware
- version/zyxel usg1900 firmware/4.31
- canonical/zyxel usg1900
- canonical/zyxel usg2200-vpn firmware
- version/zyxel usg2200-vpn firmware/4.31
- canonical/zyxel usg2200-vpn
- canonical/zyxel zywall 110 firmware
- version/zyxel zywall 110 firmware/4.31
- canonical/zyxel zywall 110
- canonical/zyxel zywall 310 firmware
- version/zyxel zywall 310 firmware/4.31
- canonical/zyxel zywall 310
- canonical/zyxel zywall 1100 firmware
- version/zyxel zywall 1100 firmware/4.31
- canonical/zyxel zywall 1100
- canonical/zyxel vpn50 firmware
- canonical/zyxel vpn50
- canonical/zyxel vpn100 firmware
- canonical/zyxel vpn100
- canonical/zyxel vpn300 firmware
- canonical/zyxel vpn300