Beveiligingsadvies

CVE-2017-17550

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-11-10 22:00:00
Laatst bijgewerkt 2024-08-05 20:51:32
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently be used for stored XSS.