{"affected":[{"affectedData":[{"product":"Zyxel GS1200 series firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"2.00 Patch 1"}]}],"source":"security@zyxel.com.tw"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:gs1200-5_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"63808B9D-91BE-4A22-A371-3C208DA25E88","versionEndExcluding":"2.00\\(abkm.1\\)","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:gs1200-5:-:*:*:*:*:*:*:*","matchCriteriaId":"0CA0FD7C-C949-40AB-BAE6-7F4B217C391F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:gs1200-5hp_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"502727B1-44DA-4549-8FBF-EEE778B0E93D","versionEndExcluding":"2.00\\(abkn.1\\)","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:gs1200-5hp:-:*:*:*:*:*:*:*","matchCriteriaId":"AB59B85F-BF6A-4A2F-807C-2545198FF9AB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:gs1200-8_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B3D28E10-50E9-465A-8B28-C3EFA0566968","versionEndExcluding":"2.00\\(abme.1\\)","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:gs1200-8:-:*:*:*:*:*:*:*","matchCriteriaId":"060383AB-B58D-4255-B0D2-7C8EE87F80F4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:gs1200-8hp_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"ED2D7273-B9D4-40EC-BFB5-67B2B3FF321A","versionEndExcluding":"2.00\\(abmf.1\\)","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:gs1200-8hp:-:*:*:*:*:*:*:*","matchCriteriaId":"45402A64-13DC-48E6-99DA-2FBBE2939846","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack."},{"lang":"es","value":"Una vulnerabilidad de control inapropiado de la frecuencia de interacción en los switches de la serie Zyxel GS1200, podría permitir a un atacante local adivinar la contraseña mediante un ataque de canal lateral de tiempo"}],"id":"CVE-2022-0823","lastModified":"2026-06-17T04:21:19.140","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.5,"impactScore":3.6,"source":"security@zyxel.com.tw","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.5,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-06-09T16:15:08.160","references":[{"source":"security@zyxel.com.tw","tags":["Patch","Vendor Advisory"],"url":"https://www.zyxel.com/support/Zyxel-security-advisory-for-password-guessing-vulnerability-of-GS1200-series-switches.shtml"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.zyxel.com/support/Zyxel-security-advisory-for-password-guessing-vulnerability-of-GS1200-series-switches.shtml"}],"sourceIdentifier":"security@zyxel.com.tw","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-203"}],"source":"security@zyxel.com.tw","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}