Vulnerability Details CVE-2022-45441
A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a vulnerable device. A successful XSS attack could force an authenticated user to execute the stored malicious scripts and then result in a denial-of-service (DoS) condition when the user visits the Logs page of the GUI on the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.5%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2022-45441
-
cpe:2.3:h:zyxel:nbg-418n:v2
-
cpe:2.3:o:zyxel:nbg-418n_firmware:1.00(aadz.3)c0
-
cpe:2.3:o:zyxel:nbg-418n_firmware:1.00(aarp.10)c0