Search vulnerabilities

Results 2

Export CSV
CVE-2018-14893

A system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows attackers to execute system commands via the web application API.

CVSS 3.0 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
CVE-2018-14892

Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors