Vulnerabilities > Zyxel > Zywall 2 > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2007-08-13 | CVE-2007-4319 | Remote vulnerability in Zyxel Zynos and Zywall 2 The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service (infinite reboot loop) via invalid configuration data. | 4.0 |
2007-08-13 | CVE-2007-4318 | Cross-Site Scripting vulnerability in Zyxel Zynos and Zywall 2 Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to inject arbitrary web script or HTML via the sysSystemName parameter. network zyxel | 4.3 |
2007-08-13 | CVE-2007-4317 | Remote vulnerability in Zyxel Zynos and Zywall 2 Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General_1 with the (1) sysSystemName and (2) sysDomainName parameters. network zyxel | 4.3 |
2007-08-13 | CVE-2007-4316 | Remote Security vulnerability in Zyxel Zynos and Zywall 2 The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions. network zyxel | 4.3 |