Vulnerability Description
Cross-site request forgery (CSRF) vulnerability on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score
8.0
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | Nbg-418N Firmware | 1.00\(aadz.3\)c0 |
| Zyxel | Nbg-418N | All versions |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/78819
- http://www.securitytracker.com/id/1034554
- https://www.kb.cert.org/vuls/id/330000Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/78819
- http://www.securitytracker.com/id/1034554
- https://www.kb.cert.org/vuls/id/330000Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2015-7284?
CVE-2015-7284 is a vulnerability with a CVSS score of 8.0 (HIGH). Cross-site request forgery (CSRF) vulnerability on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 allows remote attackers to hijack the authentication of arbitrary users.
How severe is CVE-2015-7284?
CVE-2015-7284 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-7284?
Check the references section above for vendor advisories and patch information. Affected products include: Zyxel Nbg-418N Firmware, Zyxel Nbg-418N.