CVE-2014-0355
HighSummary
Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers to execute arbitrary code. This vulnerability can be exploited through various functions processing input data.
Risk Assessment
Attackers may gain full control over the router, potentially compromising the network and user data. This poses a serious security threat to the organization.
Recommendation
It is recommended to update the router's firmware to the latest version to mitigate this vulnerability. Additionally, network traffic should be monitored for potential attacks.
Other vulnerabilities in ZyXEL Wireless N300 NetUSB NBG-419N router
See all- CVE-2014-0356High
The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters in management functions.
- CVE-2014-0354High
The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password 'qweasdzxc' for an unspecified account, allowing remote attackers to gain index.asp login access via an HTTP request.
Original NVD description (English source)
Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers to execute arbitrary code via (1) a long temp attribute in a yweather:condition element in a forecastrss file that is processed by the checkWeather function; the (2) WeatherCity or (3) WeatherDegree variable to the detectWeather function; unspecified input to the (4) UpnpAddRunRLQoS, (5) UpnpDeleteRunRLQoS, or (6) UpnpDeletePortCheckType function; or (7) the SET COUNTRY udps command.