CVEvulnerability
CVE-2015-7256
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.
Affected configurations
• zyxel nwa1100-n firmware
• zyxel nwa1100-nh firmware
• zyxel nwa1121-ni firmware
• zyxel nwa1123-ac firmware
• zyxel nwa1123-ni firmware
• zyxel p-660hn-51 firmware
• zyxel p-663hn-51 firmware
• zyxel vmg1312-b10a firmware
• zyxel vmg1312-b30a firmware
• zyxel vmg1312-b30b firmware
• zyxel vmg4380-b10a firmware
• zyxel vmg8324-b10a firmware
• zyxel vmg8924-b10a firmware
• zyxel vmg8924-b30a firmware
• zyxel vsg1435-b101 firmware
• zyxel pmg5318-b20a firmware
• zyxel sbg3300-n000 firmware
• zyxel sbg3300-nb00 firmware
• zyxel sbg3500-n000 firmware
• zyxel gs1900-8 firmware
• zyxel gs1900-24 firmware
• zyxel c1000z firmware
• zyxel q1000 firmware
• zyxel fr1000z firmware
• zyxel p8702n firmware
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/566724 Third Party Advisory, US Government Resource
- http://www.zyxel.com/support/announcement_SSH_private_key_and_certificate_vulnerability.shtml Vendor Advisory
- http://www.kb.cert.org/vuls/id/566724 Third Party Advisory, US Government Resource
- http://www.zyxel.com/support/announcement_SSH_private_key_and_certificate_vulnerability.shtml Vendor Advisory