Description
A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.
Published: 2020-11-27
Score: 9.8 Critical
EPSS: 2.0% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2020-17714 A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.
History

Thu, 12 Dec 2024 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Zyxel zld
CPEs cpe:2.3:o:zyxel:zld_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*
Vendors & Products Zyxel zld Firmware
Zyxel zld

Subscriptions

Zyxel Access Points Firmware Nwa110ax Nwa1123-ac Hd Nwa1123-ac Pro Nwa1123-acv2 Nwa1302-ac Nwa210ax Nwa5120 Nwa5301-nj Usg110 Usg1100 Usg1900 Usg20-vpn Usg20w-vpn Usg210 Usg2200-vpn Usg310 Usg40 Usg40w Usg60 Usg60w Usg 110 Usg 1100 Usg 1900 Usg 20w Usg 20w-vpn Usg 2200-vpn Usg 310 Usg 40 Usg 40w Usg 60 Usg 60w Usg Flex 100 Usg Flex 100w Usg Flex 200 Usg Flex 500 Usg Flex 700 Vpn100 Vpn300 Vpn50 Wac5302d-s Wac6100 Wac6303d-s Wac6500 Wac6550 Wax510d Wax610d Wax650s Zld Zywall 110 Zywall 1100 Zywall 310
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-04T15:26:09.045Z

Reserved: 2020-08-28T00:00:00.000Z

Link: CVE-2020-25014

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-27T18:15:11.563

Modified: 2024-12-12T16:23:25.593

Link: CVE-2020-25014

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses