2 lines
2.9 KiB
JSON
2 lines
2.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"AMG1302-T10B firmware","vendor":"Zyxel","versions":[{"status":"affected","version":"2.00(AAJC.16)C0"}]}],"source":"security@zyxel.com.tw"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:amg1302-t10b_firmware:2.00\\(aajc.16\\)c0:*:*:*:*:*:*:*","matchCriteriaId":"824D36A3-0CB6-4BCA-939E-BECE269BC2D1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:amg1302-t10b:-:*:*:*:*:*:*:*","matchCriteriaId":"879BFC87-77C5-4762-8E6B-D3623476FC95","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[{"sourceIdentifier":"security@zyxel.com.tw","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an authenticated attacker with administrator privileges to access restricted directories by sending a crafted HTTP request to an affected device."},{"lang":"es","value":"**NO COMPATIBLE CUANDO SE ASIGNÓ** Una vulnerabilidad de path traversal en la interfaz de administración web de la versión de firmware 2.00(AAJC.16)C0 del Zyxel AMG1302-T10B podría permitir que un atacante autenticado con privilegios de administrador acceda a directorios restringidos mediante el envío de una solicitud HTTP manipulada a un dispositivo afectado."}],"id":"CVE-2025-3577","lastModified":"2026-06-17T09:20:13.887","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"security@zyxel.com.tw","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3577","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-04-22T13:28:07.029291Z","version":"2.0.3"}}]},"published":"2025-04-22T03:15:21.637","references":[{"source":"security@zyxel.com.tw","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/Jiangxiazhe/IOT_Vulnerability/blob/main/README.md"},{"source":"security@zyxel.com.tw","tags":["Product"],"url":"https://www.zyxel.com/service-provider/global/en/security-advisories/end-of-life"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/Jiangxiazhe/IOT_Vulnerability/blob/main/README.md"}],"sourceIdentifier":"security@zyxel.com.tw","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"security@zyxel.com.tw","type":"Secondary"}]}
|