description: A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device.
problem types: CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
affected:
{
vendor: Zyxel
product: ATP series firmware
versions:
version: 4.32 through 5.35, status: affected
}
{
vendor: Zyxel
product: USG FLEX series firmware
versions:
version: 4.50 through 5.35, status: affected
}
{
vendor: Zyxel
product: USG FLEX 50(W) firmware
versions:
version: 4.16 through 5.35, status: affected
}
{
vendor: Zyxel
product: USG20(W)-VPN firmware
versions:
version: 4.16 through 5.35, status: affected
}
{
vendor: Zyxel
product: VPN series firmware
versions:
version: 4.30 through 5.35, status: affected
}
{
vendor: Zyxel
product: NWA110AX firmware
versions:
version: <= 6.50(ABTG.2), status: affected
}
{
vendor: Zyxel
product: WAC500 firmware
versions:
version: <= 6.50(ABVS.0), status: affected
}
{
vendor: Zyxel
product: WAX510D firmware
versions:
version: <= 6.50(ABTF.2), status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
]