Vulnerability · Published Jun 7, 2022 · Assigned by Zyxel
CVE-2022-0823
Medium 6.2
In plain English
A medium-severity security flaw in Zyxel GS1200 series firmware from Zyxel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 3.1)6.2Medium
Exploit odds (30 days)0.2%top 85.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | Zyxel GS1200 series firmware | 2.00 Patch 1 |
Weakness: CWE-203 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N