Medium severity · published Sep 28, 2017
CVE-2015-7256
ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A,…
5.9
CVSS
0.8%
EPSS
No
On KEV
Description
ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
C1000z Firmware · Zyxel
All versions, or not specified · source: NVD
FF
Fr1000z Firmware · Zyxel
All versions, or not specified · source: NVD
GF
Gs1900-24 Firmware · Zyxel
All versions, or not specified · source: NVD
GF
Gs1900-8 Firmware · Zyxel
All versions, or not specified · source: NVD
NF
Nwa1100-n Firmware · Zyxel
All versions, or not specified · source: NVD
NF
Nwa1100-nh Firmware · Zyxel
All versions, or not specified · source: NVD
NF
Nwa1121-ni Firmware · Zyxel
All versions, or not specified · source: NVD
NF
Nwa1123-ac Firmware · Zyxel
All versions, or not specified · source: NVD
NF
Nwa1123-ni Firmware · Zyxel
All versions, or not specified · source: NVD
PF
P-660hn-51 Firmware · Zyxel
All versions, or not specified · source: NVD
PF
P-663hn-51 Firmware · Zyxel
All versions, or not specified · source: NVD
PF
P8702n Firmware · Zyxel
All versions, or not specified · source: NVD