// For flags

CVE-2019-12583

 

Severity Score

9.1
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service.

El control de acceso que falta en el componente "Tiempo libre" de varios dispositivos Zyxel UAG, USG y ZyWall permite que un atacante remoto genere cuentas de invitado al acceder directamente al generador de cuentas. Esto puede llevar a un acceso no autorizado a la red o a una denegación de servicio.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-06-02 CVE Reserved
  • 2019-06-27 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-04 CVE Updated
  • 2024-08-04 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-425: Direct Request ('Forced Browsing')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zyxel
Search vendor "Zyxel"
 Uag2100 Firmware
Search vendor "Zyxel" for product "Uag2100 Firmware"
 <= 4.18\(aaiz.1\)c0
Search vendor "Zyxel" for product "Uag2100 Firmware" and version " <= 4.18\(aaiz.1\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Uag2100
Search vendor "Zyxel" for product "Uag2100"
--
Safe
Zyxel
Search vendor "Zyxel"
 Uag4100 Firmware
Search vendor "Zyxel" for product "Uag4100 Firmware"
 <= 4.18\(aatd.1\)c0
Search vendor "Zyxel" for product "Uag4100 Firmware" and version " <= 4.18\(aatd.1\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Uag4100
Search vendor "Zyxel" for product "Uag4100"
--
Safe
Zyxel
Search vendor "Zyxel"
 Uag5100 Firmware
Search vendor "Zyxel" for product "Uag5100 Firmware"
 <= 4.18\(aapn.1\)c0
Search vendor "Zyxel" for product "Uag5100 Firmware" and version " <= 4.18\(aapn.1\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Uag5100
Search vendor "Zyxel" for product "Uag5100"
--
Safe
Zyxel
Search vendor "Zyxel"
 Usg110 Firmware
Search vendor "Zyxel" for product "Usg110 Firmware"
 <= 4.33\(aaph.0\)c0
Search vendor "Zyxel" for product "Usg110 Firmware" and version " <= 4.33\(aaph.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Usg110
Search vendor "Zyxel" for product "Usg110"
--
Safe
Zyxel
Search vendor "Zyxel"
 Usg210 Firmware
Search vendor "Zyxel" for product "Usg210 Firmware"
 <= 4.33\(aapi.0\)c0
Search vendor "Zyxel" for product "Usg210 Firmware" and version " <= 4.33\(aapi.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Usg210
Search vendor "Zyxel" for product "Usg210"
--
Safe
Zyxel
Search vendor "Zyxel"
 Usg310 Firmware
Search vendor "Zyxel" for product "Usg310 Firmware"
 <= 4.33\(aapj.0\)c0
Search vendor "Zyxel" for product "Usg310 Firmware" and version " <= 4.33\(aapj.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Usg310
Search vendor "Zyxel" for product "Usg310"
--
Safe
Zyxel
Search vendor "Zyxel"
 Usg1100 Firmware
Search vendor "Zyxel" for product "Usg1100 Firmware"
 <= 4.33\(aapk.0\)c0
Search vendor "Zyxel" for product "Usg1100 Firmware" and version " <= 4.33\(aapk.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Usg1100
Search vendor "Zyxel" for product "Usg1100"
--
Safe
Zyxel
Search vendor "Zyxel"
 Usg1900 Firmware
Search vendor "Zyxel" for product "Usg1900 Firmware"
 <= 4.33\(aapl.0\)c0
Search vendor "Zyxel" for product "Usg1900 Firmware" and version " <= 4.33\(aapl.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Usg1900
Search vendor "Zyxel" for product "Usg1900"
--
Safe
Zyxel
Search vendor "Zyxel"
 Usg2200-vpn Firmware
Search vendor "Zyxel" for product "Usg2200-vpn Firmware"
 <= 4.33\(abae.0\)c0
Search vendor "Zyxel" for product "Usg2200-vpn Firmware" and version " <= 4.33\(abae.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Usg2200-vpn
Search vendor "Zyxel" for product "Usg2200-vpn"
--
Safe
Zyxel
Search vendor "Zyxel"
 Zywall Vpn100 Firmware
Search vendor "Zyxel" for product "Zywall Vpn100 Firmware"
 <= 10.02\(abfv.0\)c0
Search vendor "Zyxel" for product "Zywall Vpn100 Firmware" and version " <= 10.02\(abfv.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Zywall Vpn100
Search vendor "Zyxel" for product "Zywall Vpn100"
--
Safe
Zyxel
Search vendor "Zyxel"
 Zywall Vpn300 Firmware
Search vendor "Zyxel" for product "Zywall Vpn300 Firmware"
 <= 10.02\(abfc.0\)c0
Search vendor "Zyxel" for product "Zywall Vpn300 Firmware" and version " <= 10.02\(abfc.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Zywall Vpn300
Search vendor "Zyxel" for product "Zywall Vpn300"
--
Safe
Zyxel
Search vendor "Zyxel"
 Zywall 110 Firmware
Search vendor "Zyxel" for product "Zywall 110 Firmware"
 <= 4.33\(aaaa.0\)c0
Search vendor "Zyxel" for product "Zywall 110 Firmware" and version " <= 4.33\(aaaa.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Zywall 110
Search vendor "Zyxel" for product "Zywall 110"
--
Safe
Zyxel
Search vendor "Zyxel"
 Zywall 310 Firmware
Search vendor "Zyxel" for product "Zywall 310 Firmware"
 <= 4.33\(aaab.0\)c0
Search vendor "Zyxel" for product "Zywall 310 Firmware" and version " <= 4.33\(aaab.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Zywall 310
Search vendor "Zyxel" for product "Zywall 310"
--
Safe
Zyxel
Search vendor "Zyxel"
 Zywall 1100 Firmware
Search vendor "Zyxel" for product "Zywall 1100 Firmware"
 <= 4.33\(aaac.0\)c0
Search vendor "Zyxel" for product "Zywall 1100 Firmware" and version " <= 4.33\(aaac.0\)c0"
-
Affected
in Zyxel
Search vendor "Zyxel"
 Zywall 1100
Search vendor "Zyxel" for product "Zywall 1100"
--
Safe