Vulnerabilities > Zyxel > Nas520 Firmware > 5.21.aasz.3.c0

DATE CVE VULNERABILITY TITLE RISK
2020-08-06 CVE-2020-13365 Improper Authentication vulnerability in Zyxel products
Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root.
network
low complexity
zyxel CWE-287
critical
9.0
2020-08-06 CVE-2020-13364 Unspecified vulnerability in Zyxel products
A backdoor in certain Zyxel products allows remote TELNET access via a CGI script.
network
low complexity
zyxel
critical
9.0