Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:nbg-418n:v2:*:*:*:*:*:*:*

part: h version: v2 update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductNbg 418N (2740d2ca-fc72-5e1c-ab63-d29a7c4bcd5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22924 not_vulnerable 2026-06-08 05:54:27.457176 Details available
MEDIUM (4.9)
A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing crafted CLI commands on a vulnerable device.
Published: 2023-05-01T00:00:00.000Z
Updated: 2025-01-30T16:47:11.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22923 not_vulnerable 2026-06-08 05:54:27.456780 Details available
MEDIUM (6.5)
A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker to cause denial-of-service (DoS) conditions on an affected device.
Published: 2023-05-01T00:00:00.000Z
Updated: 2025-01-30T16:48:14.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22922 not_vulnerable 2026-06-08 05:54:27.456377 Details available
HIGH (7.5)
A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled on a vulnerable device.
Published: 2023-05-01T00:00:00.000Z
Updated: 2025-01-30T16:48:40.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22921 not_vulnerable 2026-06-08 05:54:27.455875 Details available
HIGH (7.5)
A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malicious scripts using a web management interface parameter, resulting in denial-of-service (DoS) conditions on an affected device.
Published: 2023-05-01T00:00:00.000Z
Updated: 2025-01-30T16:49:28.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45441 not_vulnerable 2026-06-08 05:50:36.351747 Details available
MEDIUM (6.1)
A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a vulnerable device. A successful XSS attack could force an authenticated user to execute the stored malicious scripts and then result in a denial-of-service (DoS) condition when the user visits the Logs page of the GUI on the device.
Published: 2023-02-07T00:00:00.000Z
Updated: 2025-03-25T14:49:09.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6710 not_vulnerable 2026-06-08 05:14:13.004522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.