XSS Vulnerability in Zyxel NBG-418N v2 Router Firmware

CVE-2023-22921

What is CVE-2023-22921?

A cross-site scripting (XSS) vulnerability exists in the Zyxel NBG-418N v2 router, particularly in firmware versions prior to V1.00(AARP.14)C0. This flaw enables a remote authenticated attacker with administrator privileges to inject malicious scripts through the web management interface. If exploited, it can lead to denial-of-service (DoS) conditions, compromising the device's availability and security. It is crucial for users to update to the latest firmware to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References