Vulnerabilities > Zyxel > P 660Hw T1 V2 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2015-12-31 CVE-2015-6017 Cross-site Scripting vulnerability in Zyxel P-660Hw-T1 V2 Firmware 3.40(Axh.0)
Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attackers to inject arbitrary web script or HTML via the (1) LoginPassword or (2) hiddenPassword parameter.
network
low complexity
zyxel CWE-79
6.1
6.1