Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-25014 Details

Description

A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://businessforum.zyxel.com/categories/security-news-and-release	CVE	Release NotesVendor Advisory
https://www.zyxel.com/support/Zyxel-security-advisory-for-buffer-overflow-vulnerability.shtml	CVE	Vendor Advisory
https://businessforum.zyxel.com/categories/security-news-and-release	[email protected]	Release NotesVendor Advisory
https://www.zyxel.com/support/Zyxel-security-advisory-for-buffer-overflow-vulnerability.shtml	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]

Affected Products

Product	Versions
zyxel zld	>= 4.30, <= 4.55
CPE cpe:2.3:o:zyxel:zld:::::::: Remediation No remediation found in references.
zyxel zywall 110	All versions
CPE cpe:2.3:h:zyxel:zywall_110:-:::::::* Remediation No remediation found in references.
zyxel zywall 1100	All versions
CPE cpe:2.3:h:zyxel:zywall_1100:-:::::::* Remediation No remediation found in references.
zyxel zywall 310	All versions
CPE cpe:2.3:h:zyxel:zywall_310:-:::::::* Remediation No remediation found in references.
zyxel usg 110	All versions
CPE cpe:2.3:h:zyxel:usg_110:-:::::::* Remediation No remediation found in references.
zyxel usg 1100	All versions
CPE cpe:2.3:h:zyxel:usg_1100:-:::::::* Remediation No remediation found in references.
zyxel usg 1900	All versions
CPE cpe:2.3:h:zyxel:usg_1900:-:::::::* Remediation No remediation found in references.
zyxel usg 20w	All versions
CPE cpe:2.3:h:zyxel:usg_20w:-:::::::* Remediation No remediation found in references.
zyxel usg 20w-vpn	All versions
CPE cpe:2.3:h:zyxel:usg_20w-vpn:-:::::::* Remediation No remediation found in references.
zyxel usg 2200-vpn	All versions
CPE cpe:2.3:h:zyxel:usg_2200-vpn:-:::::::* Remediation No remediation found in references.
zyxel usg 310	All versions
CPE cpe:2.3:h:zyxel:usg_310:-:::::::* Remediation No remediation found in references.
zyxel usg 40	All versions
CPE cpe:2.3:h:zyxel:usg_40:-:::::::* Remediation No remediation found in references.
zyxel usg 40w	All versions
CPE cpe:2.3:h:zyxel:usg_40w:-:::::::* Remediation No remediation found in references.
zyxel usg 60	All versions
CPE cpe:2.3:h:zyxel:usg_60:-:::::::* Remediation No remediation found in references.
zyxel usg 60w	All versions
CPE cpe:2.3:h:zyxel:usg_60w:-:::::::* Remediation No remediation found in references.
zyxel usg110	All versions
CPE cpe:2.3:h:zyxel:usg110:-:::::::* Remediation No remediation found in references.
zyxel usg1100	All versions
CPE cpe:2.3:h:zyxel:usg1100:-:::::::* Remediation No remediation found in references.
zyxel usg1900	All versions
CPE cpe:2.3:h:zyxel:usg1900:-:::::::* Remediation No remediation found in references.
zyxel usg20-vpn	All versions
CPE cpe:2.3:h:zyxel:usg20-vpn:-:::::::* Remediation No remediation found in references.
zyxel usg20w-vpn	All versions
CPE cpe:2.3:h:zyxel:usg20w-vpn:-:::::::* Remediation No remediation found in references.
zyxel usg210	All versions
CPE cpe:2.3:h:zyxel:usg210:-:::::::* Remediation No remediation found in references.
zyxel usg2200-vpn	All versions
CPE cpe:2.3:h:zyxel:usg2200-vpn:-:::::::* Remediation No remediation found in references.
zyxel usg310	All versions
CPE cpe:2.3:h:zyxel:usg310:-:::::::* Remediation No remediation found in references.
zyxel usg40	All versions
CPE cpe:2.3:h:zyxel:usg40:-:::::::* Remediation No remediation found in references.
zyxel usg40w	All versions
CPE cpe:2.3:h:zyxel:usg40w:-:::::::* Remediation No remediation found in references.
zyxel usg60	All versions
CPE cpe:2.3:h:zyxel:usg60:-:::::::* Remediation No remediation found in references.
zyxel usg60w	All versions
CPE cpe:2.3:h:zyxel:usg60w:-:::::::* Remediation No remediation found in references.
zyxel vpn100	All versions
CPE cpe:2.3:h:zyxel:vpn100:-:::::::* Remediation No remediation found in references.
zyxel vpn300	All versions
CPE cpe:2.3:h:zyxel:vpn300:-:::::::* Remediation No remediation found in references.
zyxel vpn50	All versions
CPE cpe:2.3:h:zyxel:vpn50:-:::::::* Remediation No remediation found in references.
zyxel usg flex 100	All versions
CPE cpe:2.3:h:zyxel:usg_flex_100:-:::::::* Remediation No remediation found in references.
zyxel usg flex 200	All versions
CPE cpe:2.3:h:zyxel:usg_flex_200:-:::::::* Remediation No remediation found in references.
zyxel usg flex 500	All versions
CPE cpe:2.3:h:zyxel:usg_flex_500:-:::::::* Remediation No remediation found in references.
zyxel usg flex 100w	All versions
CPE cpe:2.3:h:zyxel:usg_flex_100w:-:::::::* Remediation No remediation found in references.
zyxel usg flex 700	All versions
CPE cpe:2.3:h:zyxel:usg_flex_700:-:::::::* Remediation No remediation found in references.
zyxel access points firmware	<= 6.10 6.10 - 6.10 patch1 6.10 patch2 6.10 patch3
CPE cpe:2.3:o:zyxel:access_points_firmware:::::::: cpe:2.3:o:zyxel:access_points_firmware:6.10:-:::::: cpe:2.3:o:zyxel:access_points_firmware:6.10:patch1:::::: cpe:2.3:o:zyxel:access_points_firmware:6.10:patch2:::::: cpe:2.3:o:zyxel:access_points_firmware:6.10:patch3:::::: cpe:2.3:o:zyxel:access_points_firmware:6.10:patch4:::::: cpe:2.3:o:zyxel:access_points_firmware:6.10:patch5:::::: cpe:2.3:o:zyxel:access_points_firmware:6.10:patch6:::::: cpe:2.3:o:zyxel:access_points_firmware:6.10:patch7:::::: cpe:2.3:o:zyxel:access_points_firmware:-:::::::* Remediation No remediation found in references.
zyxel nwa1123-ac hd	All versions
CPE cpe:2.3:h:zyxel:nwa1123-ac_hd:-:::::::* Remediation No remediation found in references.
zyxel nwa1123-ac pro	All versions
CPE cpe:2.3:h:zyxel:nwa1123-ac_pro:-:::::::* Remediation No remediation found in references.
zyxel nwa1123-acv2	All versions
CPE cpe:2.3:h:zyxel:nwa1123-acv2:-:::::::* Remediation No remediation found in references.
zyxel wax510d	All versions
CPE cpe:2.3:h:zyxel:wax510d:-:::::::* Remediation No remediation found in references.
zyxel wac5302d-s	All versions
CPE cpe:2.3:h:zyxel:wac5302d-s:-:::::::* Remediation No remediation found in references.
zyxel nwa5120	All versions
CPE cpe:2.3:h:zyxel:nwa5120:-:::::::* Remediation No remediation found in references.
zyxel nwa5301-nj	All versions
CPE cpe:2.3:h:zyxel:nwa5301-nj:-:::::::* Remediation No remediation found in references.
zyxel wax610d	All versions
CPE cpe:2.3:h:zyxel:wax610d:-:::::::* Remediation No remediation found in references.
zyxel wax650s	All versions
CPE cpe:2.3:h:zyxel:wax650s:-:::::::* Remediation No remediation found in references.
zyxel wac6550	All versions
CPE cpe:2.3:h:zyxel:wac6550:-:::::::* Remediation No remediation found in references.
zyxel wac6303d-s	All versions
CPE cpe:2.3:h:zyxel:wac6303d-s:-:::::::* Remediation No remediation found in references.
zyxel wac6500	All versions
CPE cpe:2.3:h:zyxel:wac6500:-:::::::* Remediation No remediation found in references.
zyxel wac6100	All versions
CPE cpe:2.3:h:zyxel:wac6100:-:::::::* Remediation No remediation found in references.
zyxel nwa210ax	All versions
CPE cpe:2.3:h:zyxel:nwa210ax:-:::::::* Remediation No remediation found in references.
zyxel nwa110ax	All versions
CPE cpe:2.3:h:zyxel:nwa110ax:-:::::::* Remediation No remediation found in references.
zyxel nwa1302-ac	All versions
CPE cpe:2.3:h:zyxel:nwa1302-ac:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Dec 12, 2024	CPE Deprecation Remap	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Dec 10, 2020	Initial Analysis	[email protected]

CVE-2020-25014 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation