Skip to content

Zyxel Vpn300 Firmware vulnerabilities

zyxel atp, atp series firmware, nxc2500 firmware +30 more +32 moreA command injection vulnerability in the access point (AP) management feature of the Zyxel ATP...CVE-2023-341418.0 HighJuly 17, 2023
zyxel atp series firmware, nxc2500 firmware, nxc5500 firmware +26 more +28 moreA buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch...CVE-2023-341406.5 MediumJuly 17, 2023
zyxel usg flex series firmware, vpn series firmware, usg 2200-vpn firmware +16 more +18 moreA command injection vulnerability in the Free Time WiFi hotspot feature of in the Zyxel USG FLEX...CVE-2023-341398.8 HighJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +28 more +30 moreA command injection vulnerability in the hotspot management feature of the Zyxel ATP series...CVE-2023-341388.0 HighJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +24 more +26 moreA command injection vulnerability in the configuration parser of the Zyxel ATP series firmware...CVE-2023-33012Public exploit8.8 HighJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +27 more +29 moreA format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2...CVE-2023-330118.8 HighJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreThe configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware...CVE-2023-287678.8 HighJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 moreA buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware...CVE-2023-33010In KEVEPSS 29.0%9.8 CriticalMay 24, 2023
zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 moreA buffer overflow vulnerability in the notification function in Zyxel ATP series firmware...CVE-2023-33009In KEVEPSS 28.1%9.8 CriticalMay 24, 2023
zyxel atp series firmware, usg flex series firmware, vpn series firmware +21 more +23 moreImproper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73,...CVE-2023-28771In KEVPublic exploitEPSS 99.3%9.8 CriticalApril 25, 2023
zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +21 more +23 moreThe post-authentication command injection vulnerability in the CLI command of Zyxel ATP series...CVE-2023-279918.8 HighApril 24, 2023
zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +21 more +23 moreThe XSS vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series...CVE-2023-279904.8 MediumApril 24, 2023
zyxel atp series firmware, nwa110ax firmware, usg flex 50(w) firmware +53 more +55 moreA post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series...CVE-2023-229186.5 MediumApril 24, 2023
zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +20 more +22 moreA buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware...CVE-2023-229177.5 HighApril 24, 2023
zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +20 more +22 moreThe configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series...CVE-2023-229168.1 HighApril 24, 2023
zyxel usg flex 50(w) firmware, usg flex series firmware, usg20(w)-vpn firmware +13 more +15 moreA buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series...CVE-2023-229157.5 HighApril 24, 2023
zyxel usg flex series firmware, vpn series firmware, usg flex 100 firmware +10 more +12 moreA path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series...CVE-2023-229147.2 HighApril 24, 2023
zyxel usg flex series firmware, vpn series firmware, usg flex 100 firmware +10 more +12 moreA post-authentication command injection vulnerability in the “account_operator.cgi” CGI program...CVE-2023-229138.1 HighApril 24, 2023
zyxel atp series firmware, usg flex series firmware, vpn series firmware +26 more +28 moreA post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG...CVE-2022-385477.2 HighFebruary 7, 2023
zyxel atp series firmware, usg flex series firmware, vpn series firmware +20 more +22 moreA cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware...CVE-2022-406034.7 MediumDecember 6, 2022
zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 moreA directory traversal vulnerability caused by specific character sequences within an improperly...CVE-2022-20306.5 MediumJuly 19, 2022
zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 moreA privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W)...CVE-2022-30526Public exploit7.8 HighJuly 19, 2022
zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreA argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series...CVE-2022-265327.8 HighMay 24, 2022
zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 moreA downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI...CVE-2022-09106.5 MediumMay 24, 2022
zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 moreA cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series...CVE-2022-07345.8 MediumMay 24, 2022
zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreMultiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL...CVE-2022-265316.1 MediumMay 24, 2022
zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +19 more +21 moreA OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware...CVE-2022-30525In KEVPublic exploitEPSS 99.9%9.8 CriticalMay 12, 2022
zyxel atp series firmware, nsg series firmware, usg flex series firmware +25 more +27 moreAn authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware...CVE-2022-0342EPSS 95.1%9.8 CriticalMarch 28, 2022
zyxel usg/zywall series firmware, vpn series firmware, atp series firmware +38 more +40 moreAn authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall...CVE-2021-350299.8 CriticalJuly 2, 2021
zyxel atp100 firmware, atp100w firmware, atp200 firmware +28 more +30 moreFirmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an...CVE-2020-29583In KEVPublic exploitEPSS 90.0%9.8 CriticalDecember 22, 2020
zyxel nas326, nas520, nas540 +38 more +40 moreZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgiCVE-2020-9054In KEVPublic exploitEPSS 100.0%9.8 CriticalMarch 4, 2020
zyxel uag2100 firmware, uag4100 firmware, uag5100 firmware +11 more +13 moreMissing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices...CVE-2019-12583EPSS 43.9%9.1 CriticalJune 27, 2019
zyxel atp200 firmware, atp500 firmware, atp800 firmware +18 more +20 moreOn Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110,...CVE-2019-9955Public exploitEPSS 21.2%6.1 MediumApril 22, 2019