What’s Vulnerable › Vulnerabilities

CVE-2018-15602

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-26 · updated 2026-06-17
• Weakness: CWE-79

Description

Zyxel VMG3312 B10B devices are affected by a persistent XSS vulnerability via the pages/connectionStatus/connectionStatus-hostEntry.cmd hostname parameter.

Affected products

• Zyxel Vmg3312 B10B Firmware: all versions

References

• https://gist.github.com/f4lcone/e786fa8fc2919c8ec6f90d8a7ba555ea
• https://gist.github.com/f4lcone/e786fa8fc2919c8ec6f90d8a7ba555ea

Get alerted when CVE-2018-15602 or the next vulnerability affects your stack