CVE-2016-10227: Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of servi...

Security readout for executives and security teams

This issue can let a remote attacker exhaust CPU on specific Zyxel security and access-point devices, causing denial of service. The provided sources do not show data theft, code execution, or CISA KEV-listed exploitation, but availability disruption could affect network edge services. Exposure is most likely where the named Zyxel devices remain deployed and can receive untrusted ICMPv4 traffic. The source bundle does not identify other affected products, versions, or configuration-specific prerequisites. Prioritize if these devices protect important sites or sit on exposed network paths. The risk is availability-focused, not proven compromise, but unsupported edge hardware can turn a packet flood into an outage. Mitigation focus: Check Zyxel’s advisory for model-specific firmware or workaround guidance.; Restrict unnecessary inbound ICMPv4 traffic to affected devices.; Use upstream filtering or rate limiting where business requirements allow..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.