Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zyxel usg flex firmware - vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2022-30525
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 up to and including 5.21 Patch 1, US...
Zyxel Usg Flex 100w FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 700 FirmwareZyxel Vpn100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn50 FirmwareZyxel Atp100 FirmwareZyxel Atp100w FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp700 FirmwareZyxel Atp800 FirmwareZyxel Usg Flex 50w FirmwareZyxel Usg20w-vpn Firmware
7.5
CVSSv2
CVE-2022-0342
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 up to and including 4.70, USG FLEX series firmware versions 4.50 up to and including 5.20, ATP series firmware versions 4.32 up to and including 5.20, VPN series firmware v...
Zyxel Usg40 FirmwareZyxel Usg40w FirmwareZyxel Usg60 FirmwareZyxel Usg60w FirmwareZyxel Zywall 110 FirmwareZyxel Zywall 310 FirmwareZyxel Zywall 1100 FirmwareZyxel Usg Flex 100 FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 100w FirmwareZyxel Usg Flex 700 FirmwareZyxel Atp100 FirmwareZyxel Atp100w FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp700 FirmwareZyxel Atp800 FirmwareZyxel Vpn50 FirmwareZyxel Vpn100 FirmwareZyxel Vpn300 FirmwareZyxel Vpn1000 Firmware
7.5
CVSSv2
CVE-2021-35029
An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 up to and including 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 up to and including 5.01, which could allow a remote malicious user to...
Zyxel Usg1900 FirmwareZyxel Usg1100 FirmwareZyxel Usg310 FirmwareZyxel Usg210 FirmwareZyxel Usg110 FirmwareZyxel Usg40 FirmwareZyxel Usg40w FirmwareZyxel Usg60 FirmwareZyxel Usg60w FirmwareZyxel Usg300 FirmwareZyxel Usg1000 FirmwareZyxel Usg2000 FirmwareZyxel Usg20 FirmwareZyxel Usg20w FirmwareZyxel Usg50 FirmwareZyxel Usg100 FirmwareZyxel Usg200 FirmwareZyxel Usg Flex 100 FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 100w FirmwareZyxel Usg Flex 700 Firmware
7.2
CVSSv2
CVE-2022-26532
A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 up to and including 4.71, USG FLEX series firmware versions 4.50 up to and including 5.21, ATP series firmware versions 4.32 up to and including 5.21, ...
Zyxel Vpn100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn50 FirmwareZyxel Atp100 FirmwareZyxel Atp100w FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp700 FirmwareZyxel Atp800 FirmwareZyxel Usg 110 FirmwareZyxel Usg 1100 FirmwareZyxel Usg 1900 FirmwareZyxel Usg 20w FirmwareZyxel Usg 20w-vpn FirmwareZyxel Usg 2200-vpn FirmwareZyxel Usg 310 FirmwareZyxel Usg 40 FirmwareZyxel Usg 40w FirmwareZyxel Usg 60 FirmwareZyxel Usg 60w FirmwareZyxel Usg Flex 100 Firmware
4.6
CVSSv2
CVE-2022-26531
Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 up to and including 4.71, USG FLEX series firmware versions 4.50 up to and including 5.21, ATP series firmware versions 4.32 up to and including 5.21, V...
Zyxel Vpn100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn50 FirmwareZyxel Atp100 FirmwareZyxel Atp100w FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp700 FirmwareZyxel Atp800 FirmwareZyxel Usg 110 FirmwareZyxel Usg 1100 FirmwareZyxel Usg 1900 FirmwareZyxel Usg 20w FirmwareZyxel Usg 20w-vpn FirmwareZyxel Usg 2200-vpn FirmwareZyxel Usg 310 FirmwareZyxel Usg 40 FirmwareZyxel Usg 40w FirmwareZyxel Usg 60 FirmwareZyxel Usg 60w FirmwareZyxel Usg Flex 100 Firmware
4.3
CVSSv2
CVE-2022-0734
A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 up to and including 4.70, USG FLEX series firmware versions 4.50 up to and including 5.20, ATP series firmware versions 4.35 up to and including 5.20, and VPN ...
Zyxel Vpn100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn50 FirmwareZyxel Atp100 FirmwareZyxel Atp100w FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp700 FirmwareZyxel Atp800 FirmwareZyxel Usg 110 FirmwareZyxel Usg 1100 FirmwareZyxel Usg 1900 FirmwareZyxel Usg 20w FirmwareZyxel Usg 20w-vpn FirmwareZyxel Usg 2200-vpn FirmwareZyxel Usg 310 FirmwareZyxel Usg 40 FirmwareZyxel Usg 40w FirmwareZyxel Usg 60 FirmwareZyxel Usg 60w FirmwareZyxel Usg Flex 100 Firmware
4
CVSSv2
CVE-2022-0910
A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 up to and including 4.71, USG FLEX series firmware versions 4.50 up to and including 5.21, ATP series firmware versions 4.32 ...
Zyxel Vpn100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn50 FirmwareZyxel Atp100 FirmwareZyxel Atp100w FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp700 FirmwareZyxel Atp800 FirmwareZyxel Usg 110 FirmwareZyxel Usg 1100 FirmwareZyxel Usg 1900 FirmwareZyxel Usg 20w FirmwareZyxel Usg 20w-vpn FirmwareZyxel Usg 2200-vpn FirmwareZyxel Usg 310 FirmwareZyxel Usg 40 FirmwareZyxel Usg 40w FirmwareZyxel Usg 60 FirmwareZyxel Usg 60w FirmwareZyxel Usg Flex 100 Firmware
NA
CVE-2023-6764
A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 up to and including 5.37 Patch 1, USG FLEX series firmware versions from 4.50 up to and including 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 ...
NA
CVE-2023-6397
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 up to and including 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 up to and including 5.37 Patch 1 could allow a LAN-based malicious user to cause denial-of-service (DoS) cond...
NA
CVE-2023-6398
A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 up to and including 5.37 Patch 1, USG FLEX series firmware versions from 4.50 up to and including 5.37 Patch 1, USG FLEX 50(W) series firmware versions ...
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook