Unrated severityNVD Advisory· Published Oct 4, 2014· Updated May 6, 2026

CVE-2014-7278

Description

The login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to cause a denial of service (persistent web-interface outage) via JavaScript code within unspecified "welcome message" form data that is improperly handled during use for the loginMsg variable's value, a different vulnerability than CVE-2014-7277.

Affected products

Zyxel/Sbg3300 N
cpe:2.3:h:zyxel:sbg3300-n:-:*:*:*:*:*:*:*
Zyxel/Sbg3300 N Firmware
cpe:2.3:o:zyxel:sbg3300-n_firmware:*:*:*:*:*:*:*:*
Range: <=1.00\(aady.4\)c0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

archives.neohapsis.com/archives/bugtraq/2014-10/0025.htmlnvdExploit
packetstormsecurity.com/files/128550/ZyXEL-SBG-3300-Security-Gateway-Denial-Of-Service.htmlnvdExploit
seclists.org/fulldisclosure/2014/Oct/20nvd
exchange.xforce.ibmcloud.com/vulnerabilities/96892nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000