ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-9955

PoC ×2—
CVSS 3.0
6.1 medium
EPSS
21%p97
Published
()
Modified
Description

On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter.

Vendors
zyxel
Products
atp200 firmware, atp500 firmware, atp800 firmware, usg20-vpn firmware, usg20w-vpn firmware, usg40 firmware, usg40w firmware, usg60 firmware, usg60w firmware, usg110 firmware, usg210 firmware, usg310 firmware
Weakness
CWE-79
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (21.2%)

In the news

No ingested article mentions this CVE yet.