Medium severity6.2NVD Advisory· Published Jun 9, 2022· Updated Jun 17, 2026

CVE-2022-0823

Description

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack.

Affected products

Zyxel/Gs1200 5 Firmware
cpe:2.3:o:zyxel:gs1200-5_firmware:*:*:*:*:*:*:*:*
Range: <2.00\(abkm.1\)
Zyxel/Gs1200 5hp Firmware
cpe:2.3:o:zyxel:gs1200-5hp_firmware:*:*:*:*:*:*:*:*
Range: <2.00\(abkn.1\)
Zyxel/Gs1200 8 Firmware
cpe:2.3:o:zyxel:gs1200-8_firmware:*:*:*:*:*:*:*:*
Range: <2.00\(abme.1\)
Zyxel/Gs1200 8hp Firmware
cpe:2.3:o:zyxel:gs1200-8hp_firmware:*:*:*:*:*:*:*:*
Range: <2.00\(abmf.1\)
Zyxel/GS1200 series switchesllm-fuzzy
Zyxel/Zyxel GS1200 series firmwarev5
Range: 2.00 Patch 1

Patches

Vulnerability mechanics

References

www.zyxel.com/support/Zyxel-security-advisory-for-password-guessing-vulnerability-of-GS1200-series-switches.shtmlnvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.403
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000