CVE-2019-12581

MEDIUM NUCLEI

Zyxel Uag2100 Firmware < 4.18\(aaiz.1\)c0 - XSS

Title source: rule

Description

A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or HTML via the err_msg parameter.

Nuclei Templates (1)

Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting

MEDIUMby n-thumann

Shodan: http.title:"ZyWall"

FOFA: title="zywall"

References (4)

[Exploit, Third Party Advisory] https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/

[Exploit, Patch, Third Party Advisory] https://sec-consult.com/en/blog/advisories/reflected-cross-site-scripting-in-zxel-zywall/index.html

[Patch, Vendor Advisory] https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml

[Vendor Advisory] https://www.zyxel.com/us/en/

Scores

CVSS v3 6.1

EPSS 0.3583

EPSS Percentile 97.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (9)

zyxel/uag2100_firmware < 4.18\(aaiz.1\)c0

zyxel/uag4100_firmware < 4.18\(aatd.1\)c0

zyxel/uag5100_firmware < 4.18\(aapn.1\)c0

zyxel/usg1100_firmware < 4.30

zyxel/usg110_firmware < 4.30

zyxel/usg1900_firmware < 4.30

zyxel/usg210_firmware < 4.30

zyxel/usg2200-vpn_firmware < 4.30

zyxel/usg310_firmware < 4.30

Published Jun 27, 2019

Tracked Since Feb 18, 2026