Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-45441 EUVD-2022-48312GHSA-xcqv-8q74-7h3x

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker …

Published Feb 7, 2023 · Updated Mar 25, 2025 · Assigned by Zyxel

Description

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a vulnerable device. A successful XSS attack could force an authenticated user to execute the stored malicious scripts and then result in a denial-of-service (DoS) condition when the user visits the Logs page of the GUI on the device.

Affected products

VendorProductAffectedFixed
Zyxel NBG-418N v2 firmware < V1.00(AARP.13)C0 —

References