- Description
- The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service (infinite reboot loop) via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF; if so, then it should not be included in CVE.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:N/A:P
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zyxel:zynos:3.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E57C45D-9E5D-4638-AA28-CC7ABB9E5A4F"
},
{
"criteria": "cpe:2.3:h:zyxel:zywall_2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08C561C2-F462-4F79-9D79-AE5E634B5324"
}
],
"operator": "OR"
}
]
}
]