Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zyxel usg20w firmware vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2022-30525
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 up to and including 5.21 Patch 1, US...
Zyxel Usg Flex 100w FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 700 FirmwareZyxel Vpn100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn50 FirmwareZyxel Atp100 FirmwareZyxel Atp100w FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp700 FirmwareZyxel Atp800 FirmwareZyxel Usg Flex 50w FirmwareZyxel Usg20w-vpn Firmware
NA
CVE-2022-2030
A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG FLEX 100(W) firmware versions 4.50 up to and including 5.30, USG FLEX 200 firmware versions 4.50 up to and including 5.30...
Zyxel Usg Flex 100w FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 700 FirmwareZyxel Usg Flex 50w FirmwareZyxel Usg20w-vpn FirmwareZyxel Atp800 FirmwareZyxel Atp700 FirmwareZyxel Atp500 FirmwareZyxel Atp200 FirmwareZyxel Atp100w FirmwareZyxel Atp100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn100 FirmwareZyxel Vpn50 FirmwareZyxel Usg20-vpn FirmwareZyxel Usg 2200-vpn FirmwareZyxel Zywall 110 FirmwareZyxel Zywall 310 FirmwareZyxel Zywall 1100 FirmwareZyxel Usg40 Firmware
NA
CVE-2022-38547
A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 up to and including 4.72, VPN series firmware versions 4.30 up to and including 5.32, USG FLEX series firmware versions 4.50 up to and including 5.32, and AT...
Zyxel Atp100 FirmwareZyxel Atp200 FirmwareZyxel Atp700 FirmwareZyxel Atp500 FirmwareZyxel Atp100w FirmwareZyxel Atp800 FirmwareZyxel Usg Flex 50 FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 700 FirmwareZyxel Usg Flex 100w FirmwareZyxel Usg Flex 100 FirmwareZyxel Vpn1000 FirmwareZyxel Usg20w-vpn FirmwareZyxel Usg20-vpn FirmwareZyxel Vpn50 FirmwareZyxel Vpn300 FirmwareZyxel Vpn100 FirmwareZyxel Usg40 FirmwareZyxel Usg40w FirmwareZyxel Usg60 FirmwareZyxel Usg60w Firmware
NA
CVE-2022-30526
A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 up to and including 5.30, USG FLEX 200 firmware versions 4.50 up to and including 5.30, USG FLEX 500 firmware versions 4.50 up to and including 5.30, USG FLEX 70...
Zyxel Usg Flex 100w FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 700 FirmwareZyxel Usg Flex 50w FirmwareZyxel Usg20w-vpn FirmwareZyxel Atp800 FirmwareZyxel Atp700 FirmwareZyxel Atp500 FirmwareZyxel Atp200 FirmwareZyxel Atp100w FirmwareZyxel Atp100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn100 FirmwareZyxel Vpn50 FirmwareZyxel Usg20-vpn FirmwareZyxel Usg 2200-vpn FirmwareZyxel Zywall 110 FirmwareZyxel Zywall 310 FirmwareZyxel Zywall 1100 FirmwareZyxel Usg40 Firmware
10
CVSSv2
CVE-2020-29583
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin p...
Zyxel Usg20-vpn Firmware 4.60Zyxel Usg20w-vpn Firmware 4.60Zyxel Usg40 Firmware 4.60Zyxel Usg40w Firmware 4.60Zyxel Usg60 Firmware 4.60Zyxel Usg60w Firmware 4.60Zyxel Usg110 Firmware 4.60Zyxel Usg210 Firmware 4.60Zyxel Usg310 Firmware 4.60Zyxel Usg1100 Firmware 4.60Zyxel Usg1900 Firmware 4.60Zyxel Usg2200 Firmware 4.60Zyxel Zywall110 Firmware 4.60Zyxel Zywall310 Firmware 4.60Zyxel Zywall1100 Firmware 4.60
10
CVSSv2
CVE-2020-9054
Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated malicious user to execute arbitrary code on a vulnerable device. ZyXEL NAS devices achieve a...
Zyxel Nas326 FirmwareZyxel Nas520 FirmwareZyxel Nas540 FirmwareZyxel Nas542 FirmwareZyxel Atp100 FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp800 FirmwareZyxel Usg20-vpn FirmwareZyxel Usg20w-vpn FirmwareZyxel Usg40 FirmwareZyxel Usg40w FirmwareZyxel Usg60 FirmwareZyxel Usg60w FirmwareZyxel Usg110 FirmwareZyxel Usg210 FirmwareZyxel Usg310 FirmwareZyxel Usg1100 FirmwareZyxel Usg1900 FirmwareZyxel Usg2200 FirmwareZyxel Vpn50 FirmwareZyxel Vpn100 Firmware
7.5
CVSSv2
CVE-2021-35029
An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 up to and including 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 up to and including 5.01, which could allow a remote malicious user to...
Zyxel Usg1900 FirmwareZyxel Usg1100 FirmwareZyxel Usg310 FirmwareZyxel Usg210 FirmwareZyxel Usg110 FirmwareZyxel Usg40 FirmwareZyxel Usg40w FirmwareZyxel Usg60 FirmwareZyxel Usg60w FirmwareZyxel Usg300 FirmwareZyxel Usg1000 FirmwareZyxel Usg2000 FirmwareZyxel Usg20 FirmwareZyxel Usg20w FirmwareZyxel Usg50 FirmwareZyxel Usg100 FirmwareZyxel Usg200 FirmwareZyxel Usg Flex 100 FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 100w FirmwareZyxel Usg Flex 700 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook