What’s Vulnerable › Vulnerabilities

CVE-2016-10227

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-02-21 · updated 2026-06-17
• Weakness: CWE-399

Description

Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a flood of ICMPv4 Port Unreachable packets.

Affected products

• Zyxel Nwa3560-N Firmware: all versions
• Zyxel Usg50 Firmware: all versions

References

• http://www.securityfocus.com/bid/97105
• http://www.zyxel.com/support/announcement_blacknurse_attack.shtml
• https://cxsecurity.com/issue/WLB-2017020177
• http://www.securityfocus.com/bid/97105
• http://www.zyxel.com/support/announcement_blacknurse_attack.shtml
• https://cxsecurity.com/issue/WLB-2017020177

Get alerted when CVE-2016-10227 or the next vulnerability affects your stack