Approved changes feed: RSS · Atom

cpe:2.3:o:zyxel:n300_netusb_nbg-419n_firmware:1.00\(bfq_6\)c0:*:*:*:*:*:*:*

part: o version: 1.00(bfq_6)c0 update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductN300 Netusb Nbg 419N Firmware (e7c6aa1b-ea13-5140-a940-1b37a9ecae67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0356 vulnerable 2026-06-08 05:05:12.660189 Details available
The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters in input to the (1) detectWeather, (2) set_language, (3) SystemCommand, or (4) NTPSyncWithHost function in management.c, or a (5) SET COUNTRY, (6) SET WLAN SSID, (7) SET WLAN CHANNEL, (8) SET WLAN STATUS, or (9) SET WLAN COUNTRY udps command.
Published: 2014-04-15T10:00:00.000Z
Updated: 2024-08-06T09:13:10.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0355 vulnerable 2026-06-08 05:05:12.659901 Details available
Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers to execute arbitrary code via (1) a long temp attribute in a yweather:condition element in a forecastrss file that is processed by the checkWeather function; the (2) WeatherCity or (3) WeatherDegree variable to the detectWeather function; unspecified input to the (4) UpnpAddRunRLQoS, (5) UpnpDeleteRunRLQoS, or (6) UpnpDeletePortCheckType function; or (7) the SET COUNTRY udps command.
Published: 2014-04-15T10:00:00.000Z
Updated: 2024-08-06T09:13:10.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0354 vulnerable 2026-06-08 05:05:12.659587 Details available
The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password of qweasdzxc for an unspecified account, which allows remote attackers to obtain index.asp login access via an HTTP request.
Published: 2014-04-15T10:00:00.000Z
Updated: 2024-08-06T09:13:10.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0353 vulnerable 2026-06-08 05:05:12.658708 Details available
The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to bypass authentication by using %2F sequences in place of / (slash) characters.
Published: 2014-04-15T10:00:00.000Z
Updated: 2024-08-06T09:13:10.242Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.