CVEFinder.io

CVE-2015-7256

🔶 medium
Summary

ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.

CVSS Score
5.9
Medium
EPSS Score
0.1
Exploit Probability
Published Date
2017-09-28
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 32.1% of all 365,968 vulnerabilities in our database.

#248,481
Below average severity
Severity Percentile
Last Modified 2025-04-20
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-310

📦 Affected Products 25

Vendor Product Status Affected Versions
zyxel pmg5318-b20a_firmware Affected
v-
zyxel nwa1100-n_firmware Affected
v-
zyxel nwa1100-nh_firmware Affected
v-
zyxel nwa1121-ni_firmware Affected
v-
zyxel nwa1123-ac_firmware Affected
v-
zyxel nwa1123-ni_firmware Affected
v-
zyxel p-660hn-51_firmware Affected
v-
zyxel p-663hn-51_firmware Affected
v-
zyxel vmg1312-b10a_firmware Affected
v-
zyxel vmg1312-b30a_firmware Affected
v-
zyxel vmg1312-b30b_firmware Affected
v-
zyxel vmg4380-b10a_firmware Affected
v-
zyxel vmg8324-b10a_firmware Affected
v-
zyxel vmg8924-b10a_firmware Affected
v-
zyxel vmg8924-b30a_firmware Affected
v-
zyxel vsg1435-b101_firmware Affected
v-
zyxel sbg3300-n000_firmware Affected
v-
zyxel sbg3300-nb00_firmware Affected
v-
zyxel sbg3500-n000_firmware Affected
v-
zyxel c1000z_firmware Affected
v-
zyxel q1000_firmware Affected
v-
zyxel fr1000z_firmware Affected
v-
zyxel p8702n_firmware Affected
v-
zyxel gs1900-24_firmware Affected
v-
zyxel gs1900-8_firmware Affected
v-

🔗 References 2

http://www.kb.cert.org/vuls/id/566724
Third Party Advisory US Government Resource
http://www.zyxel.com/support/announcement_SSH_privat...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-7273 ⚠️ high 8.8 - A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(AB... 2026-06-16
CVE-2026-7287 ⚠️ high 7.5 0.3 ** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formU... 2026-05-12
CVE-2024-40890 ⚠️ high 8.8 13.0 **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL... 2025-02-04
CVE-2024-40891 ⚠️ high 8.8 39.3 **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the le... 2025-02-04
CVE-2025-0890 ⛔ critical 9.8 1.2 **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B... 2025-02-04
CVE-2024-8881 🔶 medium 6.8 0.1 A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version ... 2024-11-12
These CVEs affect the same products