CVE-2018-19326

EPSS 9.8%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 9.8%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

17 Nov 2018Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Zyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd.

Affected products

References