What is the CVSS score of CVE-2014-0353?

CVE-2014-0353 has a CVSS 2.0 base score of 6.1 (Medium). CVSS vector: AV:A/AC:L/Au:N/C:C/I:N/A:N. EPSS exploitation probability: 0.1%.

N300 Netusb Nbg 419N Firmware CVE-2014-0353

MEDIUM

Improper Authentication (CWE-287)

2014-04-15 cret@cert.org

Zyxel Authentication Bypass N300 Netusb Nbg 419N Firmware N300 Netusb Nbg 419N

6.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:A/AC:L/Au:N/C:C/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:L/Au:N/C:C/I:N/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Apr 15, 2014 - 10:55 cve.org

MEDIUM 6.1

DescriptionCVE.org

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to bypass authentication by using %2F sequences in place of / (slash) characters.

AnalysisAI

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to bypass authentication by using %2F sequences in place of / (slash) characters. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to bypass authentication by using %2F sequences in place of / (slash) characters. Affected products include: Zyxel N300 Netusb Nbg-419N Firmware, Zyxel N300 Netusb Nbg-419N.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.