Zyxel Uag4100 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Zyxel Uag4100, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2019-12581zyxeluag2100_firmware+8
EPSS score
6.40%
A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or HTML via the err_msg parameter.9.1CVE-2019-12583zyxeluag2100_firmware+13
EPSS score
43.93%
Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service.