CVE-2007-4318: zyxel zynos_firmware

EPSS trend

Probability

2.31%

Chance of exploitation in the next 30 days

Percentile

83%

Versus all other CVEs

30-day change

0.00 pp

From 2.31% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.31%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotehardwareVerified
ZYXEL ZyWALL 2 3.62 - '/Forms/General_1?sysSystemName' Cross-Site Scripting
Maturity: weaponized

References

7 links

www.louhi.fi/advisory/zyxel_070810.txtX Refsource MISC
osvdb.org/38721VDB EntryX Refsource OSVDB
www.securityfocus.com/archive/1/476031/100/0/threadedMailing ListX Refsource BUGTRAQ
securityreason.com/securityalert/3002Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/26381Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/35913VDB EntryX Refsource XF
www.securityfocus.com/bid/25262VDB EntryX Refsource BIDExploit

Related vulnerabilities

CVE-2015-6016zyxelnbg-418n_firmware+25.73%10y ago31-12-2015 02:00ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors.CVE-2007-1586zyxelzynos_firmware3.25%19y ago21-03-2007 23:00ZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a request for the name \M via the SMB Mail Slot Protocol.CVE-2007-4316zyxelzynos_firmware1.22%19y ago13-08-2007 21:00The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions.CVE-2007-4319zyxelzynos_firmware1.36%19y ago13-08-2007 21:00The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service (infinite reboot loop) via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF; if so, then it should not be included in CVE.CVE-2007-4317zyxelzynos_firmware1.33%19y ago13-08-2007 21:00Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General_1 with the (1) sysSystemName and (2) sysDomainName parameters.CVE-2008-1524zyxelprestige_660+21.32%18y ago26-03-2008 10:00The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has "public" as its default community for both (1) read and (2) write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by reading the Dynamic DNS service password or inserting an XSS sequence into the system.sysName.0 variable, which is displayed on the System Status page.

All vulnerabilities inzynos_firmware

CVE-2007-4318: zyxel zynos_firmware

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References