NetSight
high8.8

CVE-2018-14892

Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions…

Impact

Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms.

Affected products

VendorProductAffected versions
ZyxelNsa325 V2 Firmware
Version 4.81

Weakness classification

References