Approved changes feed: RSS · Atom

cpe:2.3:a:zyxel:nbg-418n_v2_firmware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductNbg 418N V2 Firmware (e6a95096-ef91-5bb0-8d5e-96d590630e2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22924 vulnerable 2026-06-08 05:54:27.457113 Details available
MEDIUM (4.9)
A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing crafted CLI commands on a vulnerable device.
Published: 2023-05-01T00:00:00.000Z
Updated: 2025-01-30T16:47:11.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22923 vulnerable 2026-06-08 05:54:27.456718 Details available
MEDIUM (6.5)
A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker to cause denial-of-service (DoS) conditions on an affected device.
Published: 2023-05-01T00:00:00.000Z
Updated: 2025-01-30T16:48:14.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22922 vulnerable 2026-06-08 05:54:27.456310 Details available
HIGH (7.5)
A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled on a vulnerable device.
Published: 2023-05-01T00:00:00.000Z
Updated: 2025-01-30T16:48:40.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22921 vulnerable 2026-06-08 05:54:27.454527 Details available
HIGH (7.5)
A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malicious scripts using a web management interface parameter, resulting in denial-of-service (DoS) conditions on an affected device.
Published: 2023-05-01T00:00:00.000Z
Updated: 2025-01-30T16:49:28.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45441 vulnerable 2026-06-08 05:50:36.350085 Details available
MEDIUM (6.1)
A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a vulnerable device. A successful XSS attack could force an authenticated user to execute the stored malicious scripts and then result in a denial-of-service (DoS) condition when the user visits the Logs page of the GUI on the device.
Published: 2023-02-07T00:00:00.000Z
Updated: 2025-03-25T14:49:09.998Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.