Hiroki Sato

**Name of the Vulnerable Software and Affected Versions** ZWX-2000CSW2-HN versions prior to 0.3.19 ZWX-2000CS2-HN (affected versions not specified) **Description** A use of hard-coded credentials issue exists. Exploitation of this issue may allow an attacker to tamper with device settings by obtaining the credentials. This issue is caused by an insufficient fix for a previous issue. **Recommendations** Update ZWX-2000CSW2-HN to version 0.3.19 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 **Description** The issue concerns the use of hard-coded credentials in the firmware, which may allow a network-adjacent attacker with administrative privilege to alter the device's configuration. **Recommendations** For versions prior to Ver.0.3.15, update the firmware to Ver.0.3.15 or later to resolve the issue. As a temporary workaround, consider restricting administrative access to the device until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 **Description** The issue is related to incorrect permission assignment for a critical resource, which may allow a network-adjacent authenticated attacker to alter the device's configuration. **Recommendations** For ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, upgrade to Ver.0.3.15 or later to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 9.3 before 9.3-RELEASE-p22 FreeBSD versions 10.2-RC2 before 10.2-RC2-p1 FreeBSD versions 10.2-RC1 before 10.2-RC1-p2 FreeBSD versions 10.2 before 10.2-BETA2-p3 FreeBSD versions 10.1 before 10.1-RELEASE-p17 **Description** The issue allows remote authenticated users to cause a denial of service via a query from a network that is not directly connected, resulting in an assertion failure and daemon exit. **Recommendations** For FreeBSD version 9.3, update to 9.3-RELEASE-p22 or later. For FreeBSD version 10.2-RC2, update to 10.2-RC2-p1 or later. For FreeBSD version 10.2-RC1, update to 10.2-RC1-p2 or later. For FreeBSD version 10.2, update to 10.2-BETA2-p3 or later. For FreeBSD version 10.1, update to 10.1-RELEASE-p17 or later.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 6.3, 6.4, 7.1, 7.2 **Description** The issue allows local users to modify or disable IPv6 network interfaces due to a lack of permission enforcement on the SIOCSIFINFO IN6 IOCTL. This can be demonstrated by modifying the MTU. **Recommendations** For versions 6.3, 6.4, 7.1, 7.2, consider restricting access to the SIOCSIFINFO IN6 IOCTL to prevent unauthorized modification of IPv6 network interfaces. At the moment, there is no information about a newer version that contains a fix for this vulnerability.