CVE-2024-42061: XSS
First published: Tue Sep 03 2024(Updated: )
A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. The attacker could obtain browser-based information if the malicious script is executed on the victim’s browser.
Credit: security@zyxel.com.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Zyxel Zld | >=4.32<5.39 | |
| Any of | ||
| Zyxel Atp100 | ||
| Zyxel Atp100w | ||
| Zyxel ATP200 | ||
| Zyxel Atp500 | ||
| Zyxel Atp700 | ||
| Zyxel Atp800 | ||
| All of | ||
| Zyxel Zld | >=4.50<5.39 | |
| Any of | ||
| Zyxel Usg Flex 100 | ||
| Zyxel Usg Flex 100ax | ||
| Zyxel Usg Flex 100w | ||
| Zyxel Usg Flex 200 | ||
| Zyxel Usg Flex 50 | ||
| Zyxel Usg Flex 500 | ||
| Zyxel Usg Flex 700 | ||
| All of | ||
| Zyxel Zld | >=4.16<5.39 | |
| Zyxel Usg Flex 50w | ||
| All of | ||
| Zyxel Zld | >=4.16<5.39 | |
| Zyxel Usg 20w-vpn |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/zyxel
- canonical/zyxel zld
- version/zyxel zld/4.32
- canonical/zyxel atp100
- canonical/zyxel atp100w
- canonical/zyxel atp200
- canonical/zyxel atp500
- canonical/zyxel atp700
- canonical/zyxel atp800
- version/zyxel zld/4.50
- canonical/zyxel usg flex 100
- canonical/zyxel usg flex 100ax
- canonical/zyxel usg flex 100w
- canonical/zyxel usg flex 200
- canonical/zyxel usg flex 50
- canonical/zyxel usg flex 500
- canonical/zyxel usg flex 700
- version/zyxel zld/4.16
- canonical/zyxel usg flex 50w
- canonical/zyxel usg 20w-vpn