GCVE - cpe:2.3:h:zyxel:zywall_2:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:zywall_2:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Zyxel (`d3fcf896-5708-55f8-8f74-3e19a9d55b89`)
Product	Zywall 2 (`858195a9-b2f8-52c5-8dc7-555b61dfaf79`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-4319`	vulnerable	2026-06-08 04:49:56.100195	Details available The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service (infinite reboot loop) via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF; if so, then it should not be included in CVE. Published: 2007-08-13T21:00:00.000Z Updated: 2024-08-07T14:53:55.904Z Open on db.gcve.eu Reference links http://www.louhi.fi/advisory/zyxel_070810.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/35941 http://osvdb.org/42448 http://www.securityfocus.com/archive/1/476031/100/0/threaded http://securityreason.com/securityalert/3002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4318`	vulnerable	2026-06-08 04:49:56.099847	Details available Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to inject arbitrary web script or HTML via the sysSystemName parameter. Published: 2007-08-13T21:00:00.000Z Updated: 2024-08-07T14:53:55.798Z Open on db.gcve.eu Reference links http://www.louhi.fi/advisory/zyxel_070810.txt http://osvdb.org/38721 http://www.securityfocus.com/archive/1/476031/100/0/threaded http://securityreason.com/securityalert/3002 http://secunia.com/advisories/26381	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4317`	vulnerable	2026-06-08 04:49:56.099473	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General_1 with the (1) sysSystemName and (2) sysDomainName parameters. Published: 2007-08-13T21:00:00.000Z Updated: 2024-08-07T14:53:55.490Z Open on db.gcve.eu Reference links http://www.louhi.fi/advisory/zyxel_070810.txt http://www.securityfocus.com/archive/1/476031/100/0/threaded http://osvdb.org/37670 http://securityreason.com/securityalert/3002 http://secunia.com/advisories/26381	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4316`	vulnerable	2026-06-08 04:49:56.099000	Details available The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions. Published: 2007-08-13T21:00:00.000Z Updated: 2024-08-07T14:53:54.895Z Open on db.gcve.eu Reference links http://www.louhi.fi/advisory/zyxel_070810.txt http://www.securityfocus.com/archive/1/476031/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/35914 http://securityreason.com/securityalert/3002 http://secunia.com/advisories/26381	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.