PT-2020-14021 · Zyxel · Zyxel Armor X1 Wap6806

Rajivarnan R

·

CVE-2020-14461

·

Published

2020-06-22

·

Updated

2023-01-27

CVSS v3.1

8.6

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Zyxel Armor X1 WAP6806 version 1.00(ABAL.6)C0
Description The issue allows Directory Traversal via the images/eaZy/ URI.
Recommendations For Zyxel Armor X1 WAP6806 version 1.00(ABAL.6)C0, restrict access to the images/eaZy/ URI to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-14461

Affected Products

Zyxel Armor X1 Wap6806