Vulnerability Details CVE-2020-24355
Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing "FirstIndex" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B
- https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2
- https://www.zyxel.com/support/security_advisories.shtml
- https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B
- https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2
- https://www.zyxel.com/support/security_advisories.shtml
Products affected by CVE-2020-24355
-
cpe:2.3:h:zyxel:vmg5313-b30b:-
-
cpe:2.3:o:zyxel:vmg5313-b30b_firmware:-
-
cpe:2.3:o:zyxel:vmg5313-b30b_firmware:5.11(abcu.1)c0
-
cpe:2.3:o:zyxel:vmg5313-b30b_firmware:5.13(abcj.6)b3_1127