CVE-2022-45441

CVSS V2 None CVSS V3 None
Description
A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a vulnerable device. A successful XSS attack could force an authenticated user to execute the stored malicious scripts and then result in a denial-of-service (DoS) condition when the user visits the Logs page of the GUI on the device.
Overview
  • CVE ID
  • CVE-2022-45441
  • Assigner
  • security@zyxel.com.tw
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-07T02:15:07
  • Last Modified Date
  • 2023-02-14T23:46:03
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:zyxel:nbg-418n_firmware:*:*:*:*:*:*:*:* 1 OR 1.00\(aarp.10\)c0
cpe:2.3:h:zyxel:nbg-418n:v2:*:*:*:*:*:*:* 0 OR
History
Created Old Value New Value Data Type Notes
2023-04-17 07:19:25 Added to TrackCVE
2023-04-17 07:19:28 Weakness Enumeration new