Description
Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Zyxel ZyWall UAG/USG - Account Creation Access http/cves/2019/CVE-2019-12583.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.