漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Zyxel ATP 跨站脚本漏洞
Vulnerability Description
Zyxel ATP是中国合勤（Zyxel）公司的一款防火墙。 多款Zyxel产品存在安全漏洞。攻击者利用该漏洞执行跨站脚本攻击。以下产品及版本受到影响：Zyxel ATP 4.32版本至5.35版本、USG FLEX 4.50版本至5.35版本、USG FLEX 50(W) 4.16版本至5.35版本、USG20(W)-VPN 4.16版本至5.35版本、VPN 4.30版本至5.35版本。
CVSS Information
N/A
Vulnerability Type
N/A