Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cq6f-phq5-pc66

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service.

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service.

EPSS

Процентиль: 98%
0.59063
Средний

9.1 Critical

CVSS3

Дефекты

CWE-425

Связанные уязвимости

CVSS3: 9.1
nvd
больше 6 лет назад

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service.

EPSS

Процентиль: 98%
0.59063
Средний

9.1 Critical

CVSS3

Дефекты

CWE-425