GCVE - cpe:2.3:h:zyxel:p-330w_router:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:p-330w_router:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Zyxel (`d3fcf896-5708-55f8-8f74-3e19a9d55b89`)
Product	P 330W Router (`6459b618-439e-5698-9d37-10b617859761`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4504`	vulnerable	2026-06-08 04:59:31.651347	Details available The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability. Published: 2011-11-22T11:00:00.000Z Updated: 2024-09-16T16:43:13.126Z Open on db.gcve.eu Reference links http://www.upnp-hacks.org/suspect.html http://www.kb.cert.org/vuls/id/357851	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6730`	vulnerable	2026-06-08 04:50:09.659164	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote router management via goform/formRmtMgt or (2) modify the administrator password via goform/formPasswordSetup. Published: 2009-09-10T10:00:00.000Z Updated: 2024-08-07T16:18:20.635Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/27024 http://secunia.com/advisories/28172 http://seclists.org/fulldisclosure/2007/Dec/0559.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6729`	vulnerable	2026-06-08 04:50:09.658789	Details available Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors. Published: 2009-09-10T10:00:00.000Z Updated: 2024-08-07T16:18:20.589Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/27024 http://secunia.com/advisories/28172 http://seclists.org/fulldisclosure/2007/Dec/0559.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.