CVE-2019-9955: zyxel atp200_firmware Cross-site Scripting
Vulnerability summary
CVE-2019-9955 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in zyxel atp200_firmware. EPSS estimates a 21.18% chance of exploitation in the next 30 days, higher than 97.5% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 22-04-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
21.18%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 21.18% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Zyxel ZyWall 310 / ZyWall 110 / USG1900 / ATP500 / USG40 - Login Page Cross-Site Scripting
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Zyxel21 products
- atp200_firmware4.31
- atp500_firmware4.31
- atp800_firmware4.31
- usg110_firmware4.31
- usg1100_firmware4.31
1 vendor · 21 products
References
5 links- www.securitymetrics.com/blog/Zyxel-Devices-Vulnerable-Cross-Site-Scripting-Login-pageX Refsource MISCPatchThird Party Advisory
- packetstormsecurity.com/files/152525/Zyxel-ZyWall-Cross-Site-Scripting.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
- www.zyxel.com/support/reflected-cross-site-scripting-vulnerability-of-firewalls.shtmlX Refsource CONFIRMVendor Advisory