CVE-2020-13365 : Certain Zyxel products have a locally accessible binary that allows a non-root u

Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0.

Published 2020-08-06 17:15:11

Updated 2022-02-09 16:51:42

Source MITRE

View at NVD, CVE.org

Vulnerability category: BypassGain privilege

Products affected by CVE-2020-13365

Zyxel » Nas326 Firmware
Versions before (<) v5.21\(aazf.9\)c0
cpe:2.3:o:zyxel:nas326_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nas326 » Version: N/A
Zyxel » Nas520 Firmware
Versions before (<) v5.21\(aasz.5\)c0
cpe:2.3:o:zyxel:nas520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nas520 » Version: N/A
Zyxel » Nas540 Firmware
Versions before (<) v5.21\(aatb.6\)c0
cpe:2.3:o:zyxel:nas540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nas540 » Version: N/A
Zyxel » Nas542 Firmware
Versions before (<) v5.21\(abag.6\)c0
cpe:2.3:o:zyxel:nas542_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nas542 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-13365

EPSS FAQ

0.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 41 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-13365

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
8.4	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.5	5.9	MITRE
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-13365

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-13365

https://www.zyxel.com/us/en/support/security_advisories.shtml

Security Advisories | Zyxel
Vendor Advisory

CVEs referencing this url
https://www.zyxel.com/support/Zyxel-security-advisory-for-NAS-remote-access-vulnerability.shtml

Zyxel security advisory for NAS remote access vulnerability | Zyxel
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-13365

Products affected by CVE-2020-13365

Exploit prediction scoring system (EPSS) score for CVE-2020-13365

CVSS scores for CVE-2020-13365

CWE ids for CVE-2020-13365

References for CVE-2020-13365