CVE-2019-10630

HIGH

Zyxel NAS326 Firmware < 5.21 - Insufficiently Protected Credentials

Title source: llm

A plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated privileged user to get the admin password of the device.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 8.8

EPSS 0.0031

EPSS Percentile 54.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-522

Status published

Products (1)

zyxel/nas326_firmware < 5.21

Published Apr 09, 2019

Tracked Since Feb 18, 2026