This vulnerability (CWE-116) in Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 arises from improper encoding or escaping of output in the device's CGI program. An adjacent attacker on the WLAN can exploit this by setting a malformed SSID and persuading an authenticated administrator to access the “AP Select” page, resulting in a denial-of-service condition in the web management interface. The CVSS 3.1 base score is 4.5, reflecting a medium severity with attack vector as adjacent network, low attack complexity, high privileges required, no user interaction, unchanged scope, and impact limited to availability.

The vulnerability allows an adjacent attacker to cause a denial-of-service condition in the web management interface of the affected Zyxel device. There is no impact on confidentiality or integrity. The DoS could disrupt administrative access to the device’s management interface, potentially hindering device management and configuration.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is provided, administrators should be cautious about visiting the “AP Select” page when suspicious or malformed SSIDs are present on the WLAN and limit access to the management interface to trusted users and networks.