VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 4, 2014· Updated Jun 17, 2026

CVE-2014-7277

CVE-2014-7277

Description

Cross-site scripting (XSS) vulnerability in the login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified "welcome message" form data that is improperly handled during rendering of the loginMessage list item, a different vulnerability than CVE-2014-7278.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Zyxel/Sbg3300 N2 versions
    cpe:2.3:h:zyxel:sbg3300-n:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:zyxel:sbg3300-n:-:*:*:*:*:*:*:*
    • cpe:2.3:o:zyxel:sbg3300-n_firmware:*:*:*:*:*:*:*:*range: <=1.00\(aady.4\)c0
  • Zyxel/SBG-3300 Security Gatewayllm-create
    Range: <=1.00(AADY.4)C0

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.