← Back

CVE-2020-25014

nvd nist
Published: Nov 27, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.

Affected (11)

Zyxel
2 products
Zld
Access Points Firmware
Configuration A
1 platform
Running on/withPlatform Versions
Zyxel
Zywall 110
All versions
Configuration B
1 platform
Running on/withPlatform Versions
Zyxel
Zywall 1100
All versions
Configuration C
1 platform
Running on/withPlatform Versions
Zyxel
Zywall 310
All versions
Configuration D
1 platform
Running on/withPlatform Versions
Zyxel
Usg 110
All versions
Configuration E
1 platform
Running on/withPlatform Versions
Zyxel
Usg 1100
All versions
Configuration F
1 platform
Running on/withPlatform Versions
Zyxel
Usg 1900
All versions
Configuration G
1 platform
Running on/withPlatform Versions
Zyxel
Usg 20w
All versions
Configuration H
1 platform
Running on/withPlatform Versions
Zyxel
Usg 20w Vpn
All versions
Configuration I
1 platform
Running on/withPlatform Versions
Zyxel
Usg 2200 Vpn
All versions
Configuration J
1 platform
Running on/withPlatform Versions
Zyxel
Usg 310
All versions
Configuration K
1 platform
Running on/withPlatform Versions
Zyxel
Usg 40
All versions
Configuration L
1 platform
Running on/withPlatform Versions
Zyxel
Usg 40w
All versions
Configuration M
1 platform
Running on/withPlatform Versions
Zyxel
Usg 60
All versions
Configuration N
1 platform
Running on/withPlatform Versions
Zyxel
Usg 60w
All versions
Configuration O
1 platform
Running on/withPlatform Versions
Zyxel
Usg110
All versions
Configuration P
1 platform
Running on/withPlatform Versions
Zyxel
Usg1100
All versions
Configuration Q
1 platform
Running on/withPlatform Versions
Zyxel
Usg1900
All versions
Configuration R
1 platform
Running on/withPlatform Versions
Zyxel
Usg20 Vpn
All versions
Configuration S
1 platform
Running on/withPlatform Versions
Zyxel
Usg20w Vpn
All versions
Configuration T
1 platform
Running on/withPlatform Versions
Zyxel
Usg210
All versions
Configuration U
1 platform
Running on/withPlatform Versions
Zyxel
Usg2200 Vpn
All versions
Configuration V
1 platform
Running on/withPlatform Versions
Zyxel
Usg310
All versions
Configuration W
1 platform
Running on/withPlatform Versions
Zyxel
Usg40
All versions
Configuration X
1 platform
Running on/withPlatform Versions
Zyxel
Usg40w
All versions
Configuration Y
1 platform
Running on/withPlatform Versions
Zyxel
Usg60
All versions
Configuration Z
1 platform
Running on/withPlatform Versions
Zyxel
Usg60w
All versions
Configuration A
1 platform
Running on/withPlatform Versions
Zyxel
Vpn100
All versions
Configuration B
1 platform
Running on/withPlatform Versions
Zyxel
Vpn300
All versions
Configuration C
1 platform
Running on/withPlatform Versions
Zyxel
Vpn50
All versions
Configuration D
1 platform
Running on/withPlatform Versions
Zyxel
Usg Flex 100
All versions
Configuration E
1 platform
Running on/withPlatform Versions
Zyxel
Usg Flex 200
All versions
Configuration F
1 platform
Running on/withPlatform Versions
Zyxel
Usg Flex 500
All versions
Configuration G
1 platform
Running on/withPlatform Versions
Zyxel
Usg Flex 100w
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Zld
4.30 ≤ version ≤ 4.55
Running on/withPlatform Versions
Zyxel
Usg Flex 700
All versions
Configuration I
1 platform
Running on/withPlatform Versions
Zyxel
Nwa1123 Ac Hd
All versions
Configuration J
1 platform
Running on/withPlatform Versions
Zyxel
Nwa1123 Ac Pro
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Access Points Firmware
All versions
Running on/withPlatform Versions
Zyxel
Nwa1123 Acv2
All versions
Configuration L
1 platform
Running on/withPlatform Versions
Zyxel
Wax510d
All versions
Configuration M
1 platform
Running on/withPlatform Versions
Zyxel
Wac5302d S
All versions
Configuration N
1 platform
Running on/withPlatform Versions
Zyxel
Nwa5120
All versions
Configuration O
1 platform
Running on/withPlatform Versions
Zyxel
Nwa5301 Nj
All versions
Configuration P
1 platform
Running on/withPlatform Versions
Zyxel
Wax610d
All versions
Configuration Q
1 platform
Running on/withPlatform Versions
Zyxel
Wax650s
All versions
Configuration R
1 platform
Running on/withPlatform Versions
Zyxel
Wac6550
All versions
Configuration S
1 platform
Running on/withPlatform Versions
Zyxel
Wac6303d S
All versions
Configuration T
1 platform
Running on/withPlatform Versions
Zyxel
Wac6500
All versions
Configuration U
1 platform
Running on/withPlatform Versions
Zyxel
Wac6100
All versions
Configuration V
1 platform
Running on/withPlatform Versions
Zyxel
Nwa210ax
All versions
Configuration W
1 platform
Running on/withPlatform Versions
Zyxel
Nwa110ax
All versions
Configuration X
9 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Zyxel
Access Points Firmware
version ≤ 6.10
Access Points Firmware
Version 6.10
Access Points Firmware
Version 6.10 patch1
Access Points Firmware
Version 6.10 patch2
Access Points Firmware
Version 6.10 patch3
Access Points Firmware
Version 6.10 patch4
Access Points Firmware
Version 6.10 patch5
Access Points Firmware
Version 6.10 patch6
Access Points Firmware
Version 6.10 patch7
Running on/withPlatform Versions
Zyxel
Nwa1302 Ac
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.