CVE-2023-22921

7.5 highEPSS 0.5%

High (7.5) in zyxel nbg-418n firmware. EPSS 0.5% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malicious scripts using a web management interface parameter, resulting in denial-of-service (DoS) conditions on an affected device.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zyxel:nbg-418n_firmware

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router

Check your stack JSON