漏洞描述
Zyxel ZyWall、USG和UAG设备允许远程攻击者通过err_msg参数free_time_failed.cgicgi程序（也称为反射式跨站点脚本）注入任意web脚本或HTML。
Zyxel ZyWal/USG/UAG Devices XSS(CVE-2019-12581)
PoC代码
暂无相关漏洞推荐
- Omnissa Workspace ONE UEM /DevicesGateway/apps/system-app-metadata 目录遍历漏洞（CVE-2025-25231）
- POC CVE-2018-10562: Dasan GPON Devices - Remote Code Execution
- POC CVE-2018-10818: LG NAS Devices - Remote Code Execution
- POC CVE-2018-1207: Dell iDRAC7/8 Devices - Remote Code Injection
- POC CVE-2018-19326: Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion
- POC CVE-2018-9995: TBK DVR4104/DVR4216 Devices - Authentication Bypass
- POC CVE-2019-12581: Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting
- POC CVE-2019-12583: Zyxel ZyWall UAG/USG - Account Creation Access
- POC CVE-2019-15859: Socomec DIRIS A-40 Devices Password Disclosure
- POC CVE-2019-9955: Zyxel - Cross-Site Scripting
- POC CVE-2020-28351: Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting
- POC CVE-2020-29583: ZyXel USG - Hardcoded Credentials
- POC CVE-2020-9054: Zyxel NAS Firmware 5.21- Remote Code Execution