Description (CNA)
A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary commands if they coerce or trick a local user to visit a compromised website with malicious scripts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Zyxel / ARMOR Z2 (NBG6817) firmware | affected 1.00(ABCS.10)C0 |
| Zyxel / ARMOR Z1 (NBG6816) firmware | affected 1.00(AAWB.10)C0 |
CWE
CWE-352
References
ADP enrichment
No English description supplied.