Skip to contentZyxel Vpn Firmware vulnerabilities
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +7 more +9 moreA directory traversal vulnerability in the web management interface of Zyxel ATP series firmware...CVE-2024-11667In KEV7.5 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreA format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP...CVE-2023-67648.1 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex h series firmware +24 more +26 moreA format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch...CVE-2023-63995.7 Medium
- zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +45 more +47 moreA post-authentication command injection vulnerability in the file upload binary in Zyxel ATP...CVE-2023-63987.2 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +8 more +10 moreAn integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the...CVE-2023-43987.5 High
- zyxel atp, atp series firmware, nxc2500 firmware +30 more +32 moreA command injection vulnerability in the access point (AP) management feature of the Zyxel ATP...CVE-2023-341418.0 High
- zyxel atp series firmware, nxc2500 firmware, nxc5500 firmware +26 more +28 moreA buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch...CVE-2023-341406.5 Medium
- zyxel usg flex series firmware, vpn series firmware, usg 2200-vpn firmware +16 more +18 moreA command injection vulnerability in the Free Time WiFi hotspot feature of in the Zyxel USG FLEX...CVE-2023-341398.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +28 more +30 moreA command injection vulnerability in the hotspot management feature of the Zyxel ATP series...CVE-2023-341388.0 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +24 more +26 moreA command injection vulnerability in the configuration parser of the Zyxel ATP series firmware...CVE-2023-33012Public exploit8.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +27 more +29 moreA format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2...CVE-2023-330118.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreThe configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware...CVE-2023-287678.8 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 moreA buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware...CVE-2023-33010In KEVEPSS 29.0%9.8 Critical
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 moreA buffer overflow vulnerability in the notification function in Zyxel ATP series firmware...CVE-2023-33009In KEVEPSS 28.1%9.8 Critical
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +21 more +23 moreThe post-authentication command injection vulnerability in the CLI command of Zyxel ATP series...CVE-2023-279918.8 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +21 more +23 moreThe XSS vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series...CVE-2023-279904.8 Medium
- zyxel atp series firmware, nwa110ax firmware, usg flex 50(w) firmware +53 more +55 moreA post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series...CVE-2023-229186.5 Medium
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +20 more +22 moreA buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware...CVE-2023-229177.5 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +20 more +22 moreThe configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series...CVE-2023-229168.1 High
- zyxel usg flex 50(w) firmware, usg flex series firmware, usg20(w)-vpn firmware +13 more +15 moreA buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series...CVE-2023-229157.5 High
- zyxel atp series firmware, usg flex series firmware, vpn series firmware +26 more +28 moreA post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG...CVE-2022-385477.2 High
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 moreA directory traversal vulnerability caused by specific character sequences within an improperly...CVE-2022-20306.5 Medium
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 moreA privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W)...CVE-2022-30526Public exploit7.8 High
- zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreA argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series...CVE-2022-265327.8 High
- zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 moreA downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI...CVE-2022-09106.5 Medium
- zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 moreA cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series...CVE-2022-07345.8 Medium
- zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreMultiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL...CVE-2022-265316.1 Medium
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +19 more +21 moreA OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware...CVE-2022-30525In KEVPublic exploitEPSS 99.9%9.8 Critical
- zyxel usg/zywall series firmware, vpn series firmware, atp series firmware +38 more +40 moreAn authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall...CVE-2021-350299.8 Critical
- zyxel atp100 firmware, atp100w firmware, atp200 firmware +28 more +30 moreFirmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an...CVE-2020-29583In KEVPublic exploitEPSS 90.2%9.8 Critical
- zyxel nas326, nas520, nas540 +38 more +40 moreZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgiCVE-2020-9054In KEVPublic exploitEPSS 100.0%9.8 Critical
- zyxel uag2100 firmware, uag4100 firmware, uag5100 firmware +6 more +8 moreA reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in...CVE-2019-125816.1 Medium
- zyxel uag2100 firmware, uag4100 firmware, uag5100 firmware +11 more +13 moreMissing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices...CVE-2019-12583EPSS 43.9%9.1 Critical
- zyxel atp200 firmware, atp500 firmware, atp800 firmware +18 more +20 moreOn Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110,...CVE-2019-9955Public exploitEPSS 21.2%6.1 Medium
- zyxel usg 1100 firmware, usg 110 firmware, usg 1900 firmware +14 more +16 moreZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key...CVE-2018-91295.9 Medium