CVE-2015-6020

High

Published: 31/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative privileges by leveraging access to the user account.

Risk Assessment

Remote authenticated users can gain full control over the device, potentially leading to serious security breaches in the network.

Recommendation

It is recommended to update the firmware to the latest version and restrict access to user accounts.

Other vulnerabilities in ZyXEL PMG5318-B20A

CVE-2015-6018Critical
The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter.

Original NVD description (English source)

ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative privileges by leveraging access to the user account.