Alessandro Sgreccia

An improper privilege management issue in the recovery function could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device.

An incorrect permission assignment vulnerability in the PostgreSQL commands could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid.

An improper privilege management vulnerability in the web management interface could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.

The issue allows an authenticated local attacker to gain privilege escalation by stealing the authentication token of a login administrator. This attack could be successful only if the administrator has not logged out.

A post-authentication command injection issue exists in the firmware of Zyxel ATP and USG FLEX series devices. This could allow an authenticated attacker with administrator privileges to execute certain operating system commands on an affected device by executing a crafted CLI command. The vulnerability arises due to the failure to neutralize special elements used in the operating system command.

The issue is related to improper privilege management, which could allow an authenticated user to escalate privileges and download configuration files on a vulnerable device. This is due to deficiencies in access control.

The issue is related to improper privilege management in the hotspot feature of the affected devices. This could allow an authenticated local attacker to access system files on an affected device, potentially leading to unauthorized access to protected information.

The issue is related to improper privilege management in the debug CLI command of the affected Zyxel devices. This could allow an authenticated local attacker to access the administrator’s logs on an affected device. The vulnerability is associated with deficiencies in access control.

The issue is related to improper privilege management in the ZySH of the affected devices, which could allow an authenticated local attacker to modify the URL of the registration page in the web GUI of an affected device.

A buffer overflow issue in the firmware could allow an authenticated local attacker with administrator privileges to cause denial-of-service conditions by executing a CLI command with crafted strings on an affected device. The exploitation of this issue may result in a denial-of-service condition.

The issue is related to improper privilege management in the debug CLI command of the affected Zyxel devices. This could allow an authenticated local attacker to access system files on an affected device. The vulnerability is associated with deficiencies in access control.

A buffer overflow vulnerability could allow an authenticated local attacker to cause denial-of-service (DoS) conditions by executing the CLI command to dump system logs on an affected device. The vulnerability is related to a buffer overflow in the firmware of the affected devices.

The issue is related to a post-authentication command injection vulnerability in the CLI command, which could allow an authenticated attacker to execute some OS commands remotely. This vulnerability is associated with the lack of protection measures for the web page structure, potentially enabling a remote attacker to execute arbitrary scripts on the vulnerable device.

The issue is related to a cross-site scripting (XSS) vulnerability that could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful attack could result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device. This is due to the lack of protection for the web page structure, which could enable a remote attacker to execute arbitrary scripts on the vulnerable device.

A cross-site scripting (XSS) issue in the CGI program of ZyXEL devices is related to the lack of protection of the web page structure. This could allow a remote attacker to trick a user into visiting a crafted URL with the XSS payload, potentially gaining access to some browser-based information if the malicious script is executed on the victim’s browser.