CVE-2014-7278 in SBG-3300
Summary
The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to cause a denial of service (persistent web-interface outage) via JavaScript code within unspecified "welcome message" form data that is improperly handled during use for the loginMsg variable's value, a different vulnerability than CVE-2014-7277.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/01/2014
Disclosure
10/04/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67757 | ZyXEL SBG-3300 framLoad input validation | 20 | Proof-of-Concept | Unavailable | CVE-2014-7278 |