Details of VAR-202212-1097

ID

VAR-202212-1097

CVE

CVE-2022-40603

TITLE

plural ZyXEL Cross-site scripting vulnerability in the product

Trust: 0.8

sources: JVNDB: JVNDB-2022-022564

DESCRIPTION

A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG FLEX series firmware versions 4.50 through 5.31, and ATP series firmware versions 4.32 through 5.31, which could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. Then, the attacker could gain access to some browser-based information if the malicious script is executed on the victim’s browser. ATP800 firmware, ATP700 firmware, ATP500 firmware etc. ZyXEL A cross-site scripting vulnerability exists in the product.Information may be obtained and information may be tampered with

Trust: 1.62

sources: NVD: CVE-2022-40603 // JVNDB: JVNDB-2022-022564

AFFECTED PRODUCTS

vendor:	zyxel	model:	usg flex 700	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	usg60	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	usg flex 50w	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	vpn50	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	atp800	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	usg flex 200	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	usg40	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	vpn300	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	usg60w	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	usg flex 100w	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	atp800	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	usg flex 500	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	usg flex 50w	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	usg40w	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	usg40	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	atp700	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	atp700	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	vpn100	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	atp100	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	atp500	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	atp500	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	usg40w	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	vpn1000	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	vpn50	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	usg flex 500	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	atp100	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	vpn300	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	atp100w	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	atp100w	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	usg60	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	atp200	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	atp200	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	vpn100	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	usg flex 700	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	usg flex 200	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	vpn1000	scope:	lte	version:	5.31	Trust: 1.0
vendor:	zyxel	model:	usg60w	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	usg flex 100w	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	vpn1000	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	vpn300	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg flex 100w	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg60w	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg flex 500	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	vpn100	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg40w	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg flex 700	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp500	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp100w	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg flex 50w	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp800	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg flex 200	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp200	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp100	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg40	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp700	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	vpn50	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg60	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2022-022564 // NVD: CVE-2022-40603

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2022-40603
value:	MEDIUM
Trust: 1.8
security@zyxel.com.tw:	CVE-2022-40603
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-202212-2533
value:	MEDIUM
Trust: 0.6

NVD:
baseSeverity:	MEDIUM
baseScore:	6.1
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	2.7
version:	3.1
Trust: 1.0
security@zyxel.com.tw:
baseSeverity:	MEDIUM
baseScore:	4.7
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	1.4
version:	3.1
Trust: 1.0
NVD:	CVE-2022-40603
baseSeverity:	MEDIUM
baseScore:	6.1
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2022-022564 // NVD: CVE-2022-40603 // NVD: CVE-2022-40603 // CNNVD: CNNVD-202212-2533

PROBLEMTYPE DATA

problemtype:	CWE-79	Trust: 1.0
problemtype:	Cross-site scripting (CWE-79) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2022-022564 // NVD: CVE-2022-40603

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202212-2533

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-202212-2533

CONFIGURATIONS

sources: NVD: CVE-2022-40603

PATCH

title:

Zyxel USG/ZyWALL Fixes for cross-site scripting vulnerabilities

url:

http://123.124.177.30/web/xxk/bdxqbyid.tag?id=216748

Trust: 0.6

sources: CNNVD: CNNVD-202212-2533

EXTERNAL IDS

db:	NVD	id:	CVE-2022-40603	Trust: 3.2
db:	JVNDB	id:	JVNDB-2022-022564	Trust: 0.8
db:	CNNVD	id:	CNNVD-202212-2533	Trust: 0.6

sources: JVNDB: JVNDB-2022-022564 // NVD: CVE-2022-40603 // CNNVD: CNNVD-202212-2533

REFERENCES

url:	https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-in-firewalls	Trust: 2.4
url:	https://nvd.nist.gov/vuln/detail/cve-2022-40603	Trust: 1.4
url:	https://cxsecurity.com/cveshow/cve-2022-40603/	Trust: 0.6

sources: JVNDB: JVNDB-2022-022564 // NVD: CVE-2022-40603 // CNNVD: CNNVD-202212-2533

SOURCES

db:	JVNDB	id:	JVNDB-2022-022564
db:	NVD	id:	CVE-2022-40603
db:	CNNVD	id:	CNNVD-202212-2533

LAST UPDATE DATE

2023-12-18T11:55:17.875000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2022-022564	date:	2023-11-17T08:21:00
db:	NVD	id:	CVE-2022-40603	date:	2022-12-08T16:41:37.513
db:	CNNVD	id:	CNNVD-202212-2533	date:	2022-12-09T00:00:00

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2022-022564	date:	2023-11-17T00:00:00
db:	NVD	id:	CVE-2022-40603	date:	2022-12-06T02:15:09.730
db:	CNNVD	id:	CNNVD-202212-2533	date:	2022-12-06T00:00:00