Main
Vulnerability Database
Exploits
ID:10759 - Exploit for Input validation error in ZyXEL Communications Corp. products - CVE-2022-26531
ID:10759 - Exploit for Input validation error in ZyXEL Communications Corp. products - CVE-2022-26531
Published: October 25, 2024
Vulnerability identifier: #VU63561
Vulnerability risk: Low
CVE-ID: CVE-2022-26531
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
USG series
ZyWALL
USG FLEX series
ATP series
VPN series
NSG series
NXC2500
NXC5500
NAP203
NAP303
NAP353
NWA50AX
NWA55AXE
NWA90AX
NWA110AX
NWA210AX
NWA1123-AC-HD
NWA1123-AC-PRO
NWA1123ACv3
NWA1302-AC
NWA5123-AC-HD
WAC500H
WAC500
WAC5302D-S
WAC5302D-Sv2
WAC6103D-I
WAC6303D-S
WAC6502D-E
WAC6502D-S
WAC6503D-S
WAC6553D-E
WAC6552D-S
WAX510D
WAX610D
WAX630S
WAX650S
USG series
ZyWALL
USG FLEX series
ATP series
VPN series
NSG series
NXC2500
NXC5500
NAP203
NAP303
NAP353
NWA50AX
NWA55AXE
NWA90AX
NWA110AX
NWA210AX
NWA1123-AC-HD
NWA1123-AC-PRO
NWA1123ACv3
NWA1302-AC
NWA5123-AC-HD
WAC500H
WAC500
WAC5302D-S
WAC5302D-Sv2
WAC6103D-I
WAC6303D-S
WAC6502D-E
WAC6502D-S
WAC6503D-S
WAC6553D-E
WAC6552D-S
WAX510D
WAX610D
WAX630S
WAX650S
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in some CLI commands. A local user can pass specially crafted input to the application and perform a denial of service (DoS) attack.
Remediation
Install updates from vendor's website.