{"id":"CVE-2015-7256","aliases":["EUVD-2015-7187","GHSA-36v6-x937-539h"],"status":"published","title":"ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P...","description":"ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00794,"percentile":0.56642,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-310"],"published":"2017-09-27T18:00:00Z","modified":"2026-06-17T00:32:08Z","products":[{"vendor":"zyxel","product":"c1000z_firmware"},{"vendor":"zyxel","product":"fr1000z_firmware"},{"vendor":"zyxel","product":"gs1900-24_firmware"},{"vendor":"zyxel","product":"gs1900-8_firmware"},{"vendor":"zyxel","product":"nwa1100-n_firmware"},{"vendor":"zyxel","product":"nwa1100-nh_firmware"},{"vendor":"zyxel","product":"nwa1121-ni_firmware"},{"vendor":"zyxel","product":"nwa1123-ac_firmware"},{"vendor":"zyxel","product":"nwa1123-ni_firmware"},{"vendor":"zyxel","product":"p-660hn-51_firmware"},{"vendor":"zyxel","product":"p-663hn-51_firmware"},{"vendor":"zyxel","product":"p8702n_firmware"},{"vendor":"zyxel","product":"pmg5318-b20a_firmware"},{"vendor":"zyxel","product":"q1000_firmware"},{"vendor":"zyxel","product":"sbg3300-n000_firmware"},{"vendor":"zyxel","product":"sbg3300-nb00_firmware"},{"vendor":"zyxel","product":"sbg3500-n000_firmware"},{"vendor":"zyxel","product":"vmg1312-b10a_firmware"},{"vendor":"zyxel","product":"vmg1312-b30a_firmware"},{"vendor":"zyxel","product":"vmg1312-b30b_firmware"},{"vendor":"zyxel","product":"vmg4380-b10a_firmware"},{"vendor":"zyxel","product":"vmg8324-b10a_firmware"},{"vendor":"zyxel","product":"vmg8924-b10a_firmware"},{"vendor":"zyxel","product":"vmg8924-b30a_firmware"},{"vendor":"zyxel","product":"vsg1435-b101_firmware"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/566724","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.zyxel.com/support/announcement_SSH_private_key_and_certificate_vulnerability.shtml","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7256"},{"url":"https://github.com/advisories/GHSA-36v6-x937-539h"}],"sources":{"cve":[{"id":"CVE-2015-7256","description":"ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.","status":"published","published":"2017-09-27T18:00:00Z","modified":"2024-08-06T07:43:45.967Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-7187","description":"ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.","status":"published","published":"2017-09-27T18:00:00Z","modified":"2024-08-06T07:43:45Z","updated_at":"2026-11-03T02:21:53.484561Z"}],"ghsa":[{"id":"GHSA-36v6-x937-539h","title":"ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P...","description":"ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.","status":"published","published":"2022-05-17T00:33:47Z","modified":"2023-02-03T05:01:59Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:53:04.921346Z"}],"nvd":[{"id":"CVE-2015-7256","description":"ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.","status":"published","published":"2017-09-28T01:29:00.67Z","modified":"2026-06-17T00:32:08.513Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:03:19.244941Z"}]}}