CVE-2015-6017

MEDIUM

ZyXEL P-660HW-T1 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attackers to inject arbitrary web script or HTML via the (1) LoginPassword or (2) hiddenPassword parameter.

References (3)

Scores

CVSS v3 6.1
EPSS 0.0054
EPSS Percentile 67.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status draft

Affected Products (1)

zyxel/p-660hw-t1_v2_firmware

Timeline

Published Dec 31, 2015
Tracked Since Feb 18, 2026