Zyxel Usg Flex vulnerabilities

• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +7 more +9 more A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware... CVE-2024-11667 In KEV 7.5 HighNovember 27, 2024
• zyxel uos, usg flex h series uos firmware, usg flex 700h firmware +2 more The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H... CVE-2024-9677 5.5 MediumOctober 22, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 more A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from... CVE-2024-42060 7.2 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 more A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from... CVE-2024-42059 7.2 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 more A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through... CVE-2024-42058 7.5 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 more A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions... CVE-2024-42057 8.1 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex series firmware, atp800 firmware +2 more +4 more A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from... CVE-2024-7203 7.2 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 more A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP... CVE-2023-6764 8.1 HighFebruary 20, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex h series firmware +24 more +26 more A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch... CVE-2023-6399 5.7 MediumFebruary 20, 2024
• zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +45 more +47 more A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP... CVE-2023-6398 7.2 HighFebruary 20, 2024
• zyxel atp series firmware, usg flex series firmware, atp100 firmware +18 more +20 more A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4... CVE-2023-6397 6.5 MediumFebruary 20, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +8 more +10 more An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the... CVE-2023-4398 7.5 HighNovember 28, 2023
• zyxel atp, atp series firmware, nxc2500 firmware +30 more +32 more A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP... CVE-2023-34141 8.0 HighJuly 17, 2023
• zyxel atp series firmware, nxc2500 firmware, nxc5500 firmware +26 more +28 more A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch... CVE-2023-34140 6.5 MediumJuly 17, 2023
• zyxel usg flex series firmware, vpn series firmware, usg 2200-vpn firmware +16 more +18 more A command injection vulnerability in the Free Time WiFi hotspot feature of in the Zyxel USG FLEX... CVE-2023-34139 8.8 HighJuly 17, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +28 more +30 more A command injection vulnerability in the hotspot management feature of the Zyxel ATP series... CVE-2023-34138 8.0 HighJuly 17, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +24 more +26 more A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware... CVE-2023-33012 Public exploit 8.8 HighJuly 17, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +27 more +29 more A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2... CVE-2023-33011 8.8 HighJuly 17, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 more The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware... CVE-2023-28767 8.8 HighJuly 17, 2023
• zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 more A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware... CVE-2023-33010 In KEV EPSS 29.0% 9.8 CriticalMay 24, 2023
• zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 more A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware... CVE-2023-33009 In KEV EPSS 28.1% 9.8 CriticalMay 24, 2023
• zyxel atp series firmware, usg flex series firmware, vpn series firmware +21 more +23 more Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73,... CVE-2023-28771 In KEVPublic exploit EPSS 99.3% 9.8 CriticalApril 25, 2023
• zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +21 more +23 more The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series... CVE-2023-27991 8.8 HighApril 24, 2023
• zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +21 more +23 more The XSS vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series... CVE-2023-27990 4.8 MediumApril 24, 2023
• zyxel atp series firmware, nwa110ax firmware, usg flex 50(w) firmware +53 more +55 more A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series... CVE-2023-22918 6.5 MediumApril 24, 2023
• zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +20 more +22 more A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware... CVE-2023-22917 7.5 HighApril 24, 2023
• zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +20 more +22 more The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series... CVE-2023-22916 8.1 HighApril 24, 2023
• zyxel usg flex 50(w) firmware, usg flex series firmware, usg20(w)-vpn firmware +13 more +15 more A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series... CVE-2023-22915 7.5 HighApril 24, 2023
• zyxel usg flex series firmware, vpn series firmware, usg flex 100 firmware +10 more +12 more A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series... CVE-2023-22914 7.2 HighApril 24, 2023
• zyxel usg flex series firmware, vpn series firmware, usg flex 100 firmware +10 more +12 more A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program... CVE-2023-22913 8.1 HighApril 24, 2023
• zyxel atp series firmware, usg flex series firmware, vpn series firmware +26 more +28 more A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG... CVE-2022-38547 7.2 HighFebruary 7, 2023
• zyxel atp series firmware, usg flex series firmware, vpn series firmware +20 more +22 more A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware... CVE-2022-40603 4.7 MediumDecember 6, 2022
• zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 more A directory traversal vulnerability caused by specific character sequences within an improperly... CVE-2022-2030 6.5 MediumJuly 19, 2022
• zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 more A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W)... CVE-2022-30526 Public exploit 7.8 HighJuly 19, 2022
• zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 more A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series... CVE-2022-26532 7.8 HighMay 24, 2022
• zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 more A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI... CVE-2022-0910 6.5 MediumMay 24, 2022
• zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 more A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series... CVE-2022-0734 5.8 MediumMay 24, 2022
• zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 more Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL... CVE-2022-26531 6.1 MediumMay 24, 2022
• zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +19 more +21 more A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware... CVE-2022-30525 In KEVPublic exploit EPSS 99.9% 9.8 CriticalMay 12, 2022
• zyxel atp series firmware, nsg series firmware, usg flex series firmware +25 more +27 more An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware... CVE-2022-0342 EPSS 95.1% 9.8 CriticalMarch 28, 2022
• zyxel usg/zywall series firmware, vpn series firmware, atp series firmware +38 more +40 more An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall... CVE-2021-35029 9.8 CriticalJuly 2, 2021
• zyxel vpn orchestrator, zld, nsg firmware +1 more +3 more Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd... CVE-2020-29299 7.2 HighDecember 27, 2020
• zyxel atp100 firmware, atp100w firmware, atp200 firmware +28 more +30 more Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an... CVE-2020-29583 In KEVPublic exploit EPSS 90.2% 9.8 CriticalDecember 22, 2020