CVE-2020-25014: Buffer Overflow
First published: Fri Nov 27 2020(Updated: )
A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel Zywall 110 firmware | ||
| Zyxel Zywall 1100 Firmware | ||
| Zyxel Zywall 310 firmware | ||
| Zyxel USG 110 | ||
| Zyxel USG 1100 firmware | ||
| Zyxel USG1900 | ||
| Zyxel USG 20W | ||
| Zyxel USG20 | ||
| Zyxel USG2200-VPN Firmware | ||
| Zyxel USG 310 firmware | ||
| Zyxel USG40W | ||
| Zyxel USG40W | ||
| Zyxel USG60W | ||
| Zyxel USG 60w firmware | ||
| Zyxel USG 110 | ||
| Zyxel USG1100 firmware | ||
| Zyxel USG1900 Firmware | ||
| Zyxel USG20 | ||
| Zyxel USG20W-VPN Firmware | ||
| Zyxel USG210 | ||
| Zyxel USG2200-VPN Firmware | ||
| Zyxel USG 310 | ||
| Zyxel USG 40 | ||
| Zyxel USG40W | ||
| Zyxel USG 60 | ||
| Zyxel USG 60w | ||
| Zyxel VPN100 Firmware | ||
| Zyxel VPN300 | ||
| Zyxel VPN50 Firmware | ||
| Zyxel USG FLEX 100 | ||
| Zyxel USG FLEX 200 firmware | ||
| Zyxel USG FLEX 500 firmware | ||
| Zyxel USG FLEX 100w firmware | ||
| Zyxel USG FLEX 700 firmware | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA1123-AC-HD Firmware | ||
| Zyxel NWA1123-AC-PRO Firmware | ||
| Zyxel Access Points Firmware | ||
| Zyxel NWA1123-ACv2 | ||
| Zyxel WAX510D firmware | ||
| Zyxel WAC5302D-S | ||
| Zyxel NWA5120 | ||
| Zyxel NWA5301-NJ | ||
| Zyxel WAX610D | ||
| Zyxel WAX650S | ||
| Zyxel wac6550 | ||
| Zyxel WAC6303D-S | ||
| Zyxel WAC6500 | ||
| Zyxel WAC6100 | ||
| Zyxel NWA210AX Firmware | ||
| Zyxel NWA110AX | ||
| Zyxel NWA1302-AC | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel Zywall 110 firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel Zywall 1100 Firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel Zywall 310 firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 110 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 1100 firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG1900 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 20W | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG20 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG2200-VPN Firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 310 firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG40W | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG40W | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG60W | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 60w firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 110 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG1100 firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG1900 Firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG20 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG20W-VPN Firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG210 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG2200-VPN Firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 310 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 40 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG40W | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 60 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG 60w | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel VPN100 Firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel VPN300 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel VPN50 Firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG FLEX 100 | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG FLEX 200 firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG FLEX 500 firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG FLEX 100w firmware | ||
| All of | ||
| Zyxel ZLD Firmware | >=4.30<=4.55 | |
| Zyxel USG FLEX 700 firmware | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA1123-AC-HD Firmware | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA1123-AC-PRO Firmware | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | ||
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA1123-ACv2 | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel WAX510D firmware | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel WAC5302D-S | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA5120 | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA5301-NJ | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel WAX610D | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel WAX650S | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel wac6550 | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel WAC6303D-S | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel WAC6500 | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel WAC6100 | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA210AX Firmware | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA110AX | ||
| All of | ||
| Any of | ||
| Zyxel Access Points Firmware | <=6.10 | |
| Zyxel Access Points Firmware | =6.10 | |
| Zyxel Access Points Firmware | =6.10-patch1 | |
| Zyxel Access Points Firmware | =6.10-patch2 | |
| Zyxel Access Points Firmware | =6.10-patch3 | |
| Zyxel Access Points Firmware | =6.10-patch4 | |
| Zyxel Access Points Firmware | =6.10-patch5 | |
| Zyxel Access Points Firmware | =6.10-patch6 | |
| Zyxel Access Points Firmware | =6.10-patch7 | |
| Zyxel NWA1302-AC |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-25014?
CVE-2020-25014 is a stack-based buffer overflow vulnerability found in the Zyxel UTM and VPN series of gateways firmware version V4.30 through to V4.55.
How severe is CVE-2020-25014?
CVE-2020-25014 has a severity rating of 9.8 (critical).
How can remote unauthenticated attackers exploit CVE-2020-25014?
Remote unauthenticated attackers can exploit CVE-2020-25014 by sending a crafted HTTP packet, which can allow them to execute arbitrary code.
Which Zyxel devices are affected by CVE-2020-25014?
Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 are affected by CVE-2020-25014.
How can I fix CVE-2020-25014?
To fix CVE-2020-25014, Zyxel has released a security advisory and patches that should be applied to the affected devices. Please refer to the Zyxel support website for more information.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/event
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/author
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/zyxel
- canonical/zyxel zld firmware
- version/zyxel zld firmware/4.30
- version/zyxel zld firmware/4.55
- canonical/zyxel zywall 110 firmware
- canonical/zyxel zywall 1100 firmware
- canonical/zyxel zywall 310 firmware
- canonical/zyxel usg 110
- canonical/zyxel usg 1100 firmware
- canonical/zyxel usg1900
- canonical/zyxel usg 20w
- canonical/zyxel usg20
- canonical/zyxel usg2200-vpn firmware
- canonical/zyxel usg 310 firmware
- canonical/zyxel usg40w
- canonical/zyxel usg60w
- canonical/zyxel usg 60w firmware
- canonical/zyxel usg1100 firmware
- canonical/zyxel usg1900 firmware
- canonical/zyxel usg20w-vpn firmware
- canonical/zyxel usg210
- canonical/zyxel usg 310
- canonical/zyxel usg 40
- canonical/zyxel usg 60
- canonical/zyxel usg 60w
- canonical/zyxel vpn100 firmware
- canonical/zyxel vpn300
- canonical/zyxel vpn50 firmware
- canonical/zyxel usg flex 100
- canonical/zyxel usg flex 200 firmware
- canonical/zyxel usg flex 500 firmware
- canonical/zyxel usg flex 100w firmware
- canonical/zyxel usg flex 700 firmware
- canonical/zyxel access points firmware
- version/zyxel access points firmware/6.10
- version/zyxel access points firmware/6.10-patch1
- version/zyxel access points firmware/6.10-patch2
- version/zyxel access points firmware/6.10-patch3
- version/zyxel access points firmware/6.10-patch4
- version/zyxel access points firmware/6.10-patch5
- version/zyxel access points firmware/6.10-patch6
- version/zyxel access points firmware/6.10-patch7
- canonical/zyxel nwa1123-ac-hd firmware
- canonical/zyxel nwa1123-ac-pro firmware
- canonical/zyxel nwa1123-acv2
- canonical/zyxel wax510d firmware
- canonical/zyxel wac5302d-s
- canonical/zyxel nwa5120
- canonical/zyxel nwa5301-nj
- canonical/zyxel wax610d
- canonical/zyxel wax650s
- canonical/zyxel wac6550
- canonical/zyxel wac6303d-s
- canonical/zyxel wac6500
- canonical/zyxel wac6100
- canonical/zyxel nwa210ax firmware
- canonical/zyxel nwa110ax
- canonical/zyxel nwa1302-ac