{"schemaVersion":3,"id":"CVE-2015-7256","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.","dates":{"published":"2017-09-27T18:00:00.000Z","modified":"2024-08-06T07:43:45.967Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.9,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00794,"percentile":0.55572,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00794},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00794,"percentile":0.55572}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00794,"percentile":0.55572}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"zyxel","product":"c1000z_firmware","name":"c1000z firmware","label":"c1000z_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/c1000z"},{"vendor":"zyxel","product":"fr1000z_firmware","name":"fr1000z firmware","label":"fr1000z_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/fr1000z"},{"vendor":"zyxel","product":"gs1900-24_firmware","name":"gs1900-24 firmware","label":"gs1900-24_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/gs1900-24"},{"vendor":"zyxel","product":"gs1900-8_firmware","name":"gs1900-8 firmware","label":"gs1900-8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/gs1900-8"},{"vendor":"zyxel","product":"nwa1100-n_firmware","name":"nwa1100-n firmware","label":"nwa1100-n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/nwa1100-n"},{"vendor":"zyxel","product":"nwa1100-nh_firmware","name":"nwa1100-nh firmware","label":"nwa1100-nh_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/nwa1100-nh"},{"vendor":"zyxel","product":"nwa1121-ni_firmware","name":"nwa1121-ni firmware","label":"nwa1121-ni_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/nwa1121-ni"},{"vendor":"zyxel","product":"nwa1123-ac_firmware","name":"nwa1123-ac firmware","label":"nwa1123-ac_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/nwa1123-ac"},{"vendor":"zyxel","product":"nwa1123-ni_firmware","name":"nwa1123-ni firmware","label":"nwa1123-ni_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/nwa1123-ni"},{"vendor":"zyxel","product":"p-660hn-51_firmware","name":"p-660hn-51 firmware","label":"p-660hn-51_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/p-660hn-51"},{"vendor":"zyxel","product":"p-663hn-51_firmware","name":"p-663hn-51 firmware","label":"p-663hn-51_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/p-663hn-51"},{"vendor":"zyxel","product":"p8702n_firmware","name":"p8702n firmware","label":"p8702n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/p8702n"},{"vendor":"zyxel","product":"pmg5318-b20a_firmware","name":"pmg5318-b20a firmware","label":"pmg5318-b20a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/pmg5318-b20a"},{"vendor":"zyxel","product":"q1000_firmware","name":"q1000 firmware","label":"q1000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/q1000"},{"vendor":"zyxel","product":"sbg3300-n000_firmware","name":"sbg3300-n000 firmware","label":"sbg3300-n000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/sbg3300-n000"},{"vendor":"zyxel","product":"sbg3300-nb00_firmware","name":"sbg3300-nb00 firmware","label":"sbg3300-nb00_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/sbg3300-nb00"},{"vendor":"zyxel","product":"sbg3500-n000_firmware","name":"sbg3500-n000 firmware","label":"sbg3500-n000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/sbg3500-n000"},{"vendor":"zyxel","product":"vmg1312-b10a_firmware","name":"vmg1312-b10a firmware","label":"vmg1312-b10a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/vmg1312-b10a"},{"vendor":"zyxel","product":"vmg1312-b30a_firmware","name":"vmg1312-b30a firmware","label":"vmg1312-b30a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/vmg1312-b30a"},{"vendor":"zyxel","product":"vmg1312-b30b_firmware","name":"vmg1312-b30b firmware","label":"vmg1312-b30b_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/vmg1312-b30b"},{"vendor":"zyxel","product":"vmg4380-b10a_firmware","name":"vmg4380-b10a firmware","label":"vmg4380-b10a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/vmg4380-b10a"},{"vendor":"zyxel","product":"vmg8324-b10a_firmware","name":"vmg8324-b10a firmware","label":"vmg8324-b10a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/vmg8324-b10a"},{"vendor":"zyxel","product":"vmg8924-b10a_firmware","name":"vmg8924-b10a firmware","label":"vmg8924-b10a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/vmg8924-b10a"},{"vendor":"zyxel","product":"vmg8924-b30a_firmware","name":"vmg8924-b30a firmware","label":"vmg8924-b30a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/vmg8924-b30a"},{"vendor":"zyxel","product":"vsg1435-b101_firmware","name":"vsg1435-b101 firmware","label":"vsg1435-b101_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/zyxel/vsg1435-b101"}],"affectedCount":25,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.kb.cert.org/vuls/id/566724","label":"www.kb.cert.org/vuls/id/566724","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://www.zyxel.com/support/announcement_SSH_private_key_and_certificate_vulnerability.shtml","label":"www.zyxel.com/support/announcement_SSH_private_key_and_certificate_vulnerability.shtml","hostname":"www.zyxel.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-09-27T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T07:43:45.967Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T07:36:09.583Z","stale":false,"partial":false}}