Vulnerability-Lookup

CNVD-2019-22834

Vulnerability from cnvd - Published: 2019-07-16

Title

多款ZyXEL产品访问控制漏洞

Description

ZyXEL ZyWall 310等都是中国台湾合勤（ZyXEL）公司的产品。ZyXEL ZyWall 310是一款310系列VPN防火墙设备。ZyXEL ZyWall 110是一款110系列VPN防火墙设备。ZyXEL USG1900是一款下一代统一安全网关设备。 Zyxel UAG、USG和ZyWall设备中的Free Time组件存在安全漏洞，该漏洞源于程序缺少访问控制。远程攻击者可通过直接访问账户生成器利用该漏洞利用该漏洞生成访客账户，获取未授权的网络访问权限啊或造成拒绝服务。

Severity

中

Patch Name

多款ZyXEL产品访问控制漏洞的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-12583

Impacted products

Name
['ZyXEL ZyWALL 310', 'ZyXEL ZyWALL 110', 'ZyXEL USG1900']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-12583"
    }
  },
  "description": "ZyXEL ZyWall 310\u7b49\u90fd\u662f\u4e2d\u56fd\u53f0\u6e7e\u5408\u52e4\uff08ZyXEL\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002ZyXEL ZyWall 310\u662f\u4e00\u6b3e310\u7cfb\u5217VPN\u9632\u706b\u5899\u8bbe\u5907\u3002ZyXEL ZyWall 110\u662f\u4e00\u6b3e110\u7cfb\u5217VPN\u9632\u706b\u5899\u8bbe\u5907\u3002ZyXEL USG1900\u662f\u4e00\u6b3e\u4e0b\u4e00\u4ee3\u7edf\u4e00\u5b89\u5168\u7f51\u5173\u8bbe\u5907\u3002\n\nZyxel UAG\u3001USG\u548cZyWall\u8bbe\u5907\u4e2d\u7684Free Time\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u7f3a\u5c11\u8bbf\u95ee\u63a7\u5236\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u76f4\u63a5\u8bbf\u95ee\u8d26\u6237\u751f\u6210\u5668\u5229\u7528\u8be5\u6f0f\u6d1e\u5229\u7528\u8be5\u6f0f\u6d1e\u751f\u6210\u8bbf\u5ba2\u8d26\u6237\uff0c\u83b7\u53d6\u672a\u6388\u6743\u7684\u7f51\u7edc\u8bbf\u95ee\u6743\u9650\u554a\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "unknwon",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-22834",
  "openTime": "2019-07-16",
  "patchDescription": "ZyXEL ZyWall 310\u7b49\u90fd\u662f\u4e2d\u56fd\u53f0\u6e7e\u5408\u52e4\uff08ZyXEL\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002ZyXEL ZyWall 310\u662f\u4e00\u6b3e310\u7cfb\u5217VPN\u9632\u706b\u5899\u8bbe\u5907\u3002ZyXEL ZyWall 110\u662f\u4e00\u6b3e110\u7cfb\u5217VPN\u9632\u706b\u5899\u8bbe\u5907\u3002ZyXEL USG1900\u662f\u4e00\u6b3e\u4e0b\u4e00\u4ee3\u7edf\u4e00\u5b89\u5168\u7f51\u5173\u8bbe\u5907\u3002\r\n\r\nZyxel UAG\u3001USG\u548cZyWall\u8bbe\u5907\u4e2d\u7684Free Time\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u7f3a\u5c11\u8bbf\u95ee\u63a7\u5236\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u76f4\u63a5\u8bbf\u95ee\u8d26\u6237\u751f\u6210\u5668\u5229\u7528\u8be5\u6f0f\u6d1e\u5229\u7528\u8be5\u6f0f\u6d1e\u751f\u6210\u8bbf\u5ba2\u8d26\u6237\uff0c\u83b7\u53d6\u672a\u6388\u6743\u7684\u7f51\u7edc\u8bbf\u95ee\u6743\u9650\u554a\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eZyXEL\u4ea7\u54c1\u8bbf\u95ee\u63a7\u5236\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "ZyXEL   ZyWALL 310",
      "ZyXEL   ZyWALL 110",
      "ZyXEL   USG1900"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-12583",
  "serverity": "\u4e2d",
  "submitTime": "2019-06-28",
  "title": "\u591a\u6b3eZyXEL\u4ea7\u54c1\u8bbf\u95ee\u63a7\u5236\u6f0f\u6d1e"
}

CVE-2019-12583 (GCVE-0-2019-12583)

Vulnerability from cvelistv5 – Published: 2019-06-27 14:01 – Updated: 2024-08-04 23:24

Summary

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

2 references

URL	Tags
https://www.zyxel.com/support/vulnerabilities-rel…	x_refsource_CONFIRM
https://n-thumann.de/blog/zyxel-gateways-missing-…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:24:39.316Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Missing Access Control in the \"Free Time\" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-06-27T14:01:02.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-12583",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Missing Access Control in the \"Free Time\" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml",
              "refsource": "CONFIRM",
              "url": "https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml"
            },
            {
              "name": "https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/",
              "refsource": "MISC",
              "url": "https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-12583",
    "datePublished": "2019-06-27T14:01:02.000Z",
    "dateReserved": "2019-06-02T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:24:39.316Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.