CVE-2019-17354

wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to disclosure of…

published October 9, 2019

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

⚠️ An unauthenticated access point might just be an open invitation! The Zyxel NBG-418N v2 allows anyone to peek at the WAN.htm page without breaking a sweat. 🔍 Think of it like a restaurant where the kitchen door is left wide open — anyone walking by can just waltz in and see the secret recipes! In this case, attackers can not only view sensitive WAN information but also tweak what they like without needing a key. An attacker could potentially gather sensitive network information that may lead to more serious exploits. They could even modify data fields, making this seemingly harmless exposure a path to bigger problems.

Put simply

Think of it like a restaurant where the kitchen door is left wide open — anyone walking by can just waltz in and see the secret recipes! In this case, attackers can not only view sensitive WAN information but also tweak what they like without needing a key. This vulnerability arises because the wan.htm page on the Zyxel NBG-418N v2 can be accessed without any authentication, allowing unauthorized users to view and alter information related to the WAN.

What to do

An attacker could potentially gather sensitive network information that may lead to more serious exploits. They could even modify data fields, making this seemingly harmless exposure a path to bigger problems. To protect your network, it's recommended to secure the device by updating the firmware to the latest version available, ensuring that access is restricted to authenticated users only. Regularly check for updates from Zyxel to stay ahead of potential vulnerabilities. You've got this! With a bit of vigilance and the right updates, you can keep your network fortress secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01392 · 72.1th percentile
Published
2019-10-09T11:57Z
EPSS history
Timeline
  • 09 OCT 11:57Z
    wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to disclosure of…
    cvelistv5