Description
A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary commands if they coerce or trick a local user to visit a compromised website with malicious scripts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zyxel | ARMOR Z2 (NBG6817) firmware | 1.00(ABCS.10)C0 | — |
| Zyxel | ARMOR Z1 (NBG6816) firmware | 1.00(AAWB.10)C0 | — |