CVE-2020-24355
N/A
N/A
Summary
Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing "FirstIndex" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://www.zyxel.com/support/security_advisories.shtml
- https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B
- https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2
References
- https://www.zyxel.com/support/security_advisories.shtml
- https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B
- https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.