peter bassill · operator
$ cve CVE-2020-25014 JSON

CVE-2020-25014

9.8
CRITICAL · CVSS 3.1 · EPSS 4.4% (pctl 91)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS4.44% — more likely to be exploited than 91% of all CVEs
WeaknessCWE-787
On CISA KEVno
Public exploitnone known
Published2020-11-27
Last modified2026-06-17

Affected (40)

VendorProduct
zyxelaccess points firmware
zyxelnwa1123-ac hd
zyxelnwa1123-ac pro
zyxelnwa1123-acv2
zyxelusg 110
zyxelusg 1100
zyxelusg 1900
zyxelusg 20w
zyxelusg 20w-vpn
zyxelusg 2200-vpn
zyxelusg 310
zyxelusg 40
zyxelusg 40w
zyxelusg 60
zyxelusg 60w
zyxelusg flex 100
zyxelusg flex 100w
zyxelusg flex 200
zyxelusg flex 500
zyxelusg flex 700
zyxelusg110
zyxelusg1100
zyxelusg1900
zyxelusg20-vpn
zyxelusg20w-vpn
zyxelusg210
zyxelusg2200-vpn
zyxelusg310
zyxelusg40
zyxelusg40w
zyxelusg60
zyxelusg60w
zyxelvpn100
zyxelvpn300
zyxelvpn50
zyxelwax510d
zyxelzld
zyxelzywall 110
zyxelzywall 1100
zyxelzywall 310

References

→ the Explorer  ·  watch your stack  ·  NVD