Vulnerability record · CVE-2021-46387 · published 1 March 2022
CVE-2021-46387: Zyxel zywall 2 plus internet security appliance firmware cross-site scripting vulnerability
Zyxel · Zywall 2 Plus Internet Security Appliance Firmware
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard hijacking and session hijacking.
Description
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard hijacking and session hijacking.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://packetstormsecurity.com/files/166189/Zyxel-ZyWALL-2-Plus-Cross-Site-Scripting.html | ExploitThird Party AdvisoryVDB Entry |
| https://drive.google.com/drive/folders/1_XfWBLqxT2Mqt7uB663Sjlc62pE8-rcN?usp=sharing | ExploitThird Party Advisory |
| https://www.zyxel.com/uk/en/products_services/zywall_2_plus.shtml | Broken LinkVendor Advisory |
| https://www.zyxel.com/us/en/support/security_advisories.shtml | Vendor Advisory |
| http://packetstormsecurity.com/files/166189/Zyxel-ZyWALL-2-Plus-Cross-Site-Scripting.html | ExploitThird Party AdvisoryVDB Entry |
| https://drive.google.com/drive/folders/1_XfWBLqxT2Mqt7uB663Sjlc62pE8-rcN?usp=sharing | ExploitThird Party Advisory |
| https://www.zyxel.com/uk/en/products_services/zywall_2_plus.shtml | Broken LinkVendor Advisory |
| https://www.zyxel.com/us/en/support/security_advisories.shtml | Vendor Advisory |
Track CVE-2021-46387 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2021-46387), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
