CVE-2014-7278 in SBG-3300
Zusammenfassung (Englisch)
The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to cause a denial of service (persistent web-interface outage) via JavaScript code within unspecified "welcome message" form data that is improperly handled during use for the loginMsg variable's value, a different vulnerability than CVE-2014-7277.
Once again VulDB remains the best source for vulnerability data.
Reservieren
01.10.2014
Veröffentlichung
04.10.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 67757 | ZyXEL SBG-3300 framLoad erweiterte Rechte | 20 | Proof-of-Concept | Unavailable | CVE-2014-7278 |