high8.0
CVE-2021-4030
A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary commands if they c…
Impact
A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary commands if they coerce or trick a local user to visit a compromised website with malicious scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Nbg6816 Firmware | Version 1.00\(aawb.10\)c0 |
| Zyxel | Nbg6817 Firmware | before 1.00\(abcs.11\)c0 |