Vulnerability Description
A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malicious scripts using a web management interface parameter, resulting in denial-of-service (DoS) conditions on an affected device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | Nbg-418N Firmware | <= 1.00\(aarp.13\)c0 |
| Zyxel | Nbg-418N | v2 |
Related Weaknesses (CWE)
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisPatchVendor Advisory
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisPatchVendor Advisory
FAQ
What is CVE-2023-22921?
CVE-2023-22921 is a vulnerability with a CVSS score of 7.5 (HIGH). A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malic...
How severe is CVE-2023-22921?
CVE-2023-22921 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-22921?
Check the references section above for vendor advisories and patch information. Affected products include: Zyxel Nbg-418N Firmware, Zyxel Nbg-418N.