Auth bypass in Zyxel N300 Netusb Nbg-419n

CVE-2014-0353

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to bypass authentication by using %2F sequences in place of / (slash) characters.

Vulnerability class: Broken Authentication

EPSS: 0.009 (54.9th percentile) — read the EPSS interpretation.

Affected products

Zyxel N300_netusb_nbg-419n
Zyxel N300_netusb_nbg-419n_firmware — versions 1.00\(bfq_6\)c0
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)