Skip to contentZyxel vulnerabilities
Products
Show 140 moreShow less
Newest
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager...CVE-2020-153396.1 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess...CVE-2020-153407.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.CVE-2020-153417.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API.CVE-2020-153425.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.CVE-2020-153435.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.CVE-2020-153445.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API.CVE-2020-153455.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.CVE-2020-153465.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.CVE-2020-153479.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.CVE-2020-153255.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.CVE-2020-153265.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.CVE-2020-153277.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions.CVE-2020-153285.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions.CVE-2020-153295.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess.CVE-2020-153305.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc...CVE-2020-153319.8 Critical
- zyxel cloud cnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager...CVE-2020-153489.8 Critical
- zyxel wap6806 firmwareZyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.CVE-2020-14461Public exploit8.6 High
- asus rt-n11, broadcom adsl, canon selphy cp1200 +214 more +216 moreThe Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the...CVE-2020-12695Public exploitFix availableEPSS 15.2%7.5 High
- zyxel xgs2210-52hp firmwareIn firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting (XSS) issues...CVE-2019-134955.4 Medium
- zyxel nas326, nas520, nas540 +38 more +40 moreZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgiCVE-2020-9054In KEVPublic exploitEPSS 100.0%9.8 Critical
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +6 more +8 moreAn issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. User...CVE-2019-157998.8 High
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +6 more +8 moreAn issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack...CVE-2019-158009.8 Critical
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +6 more +8 moreAn issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware...CVE-2019-158017.5 High
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +6 more +8 moreAn issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware...CVE-2019-158025.9 Medium
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +6 more +8 moreAn issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Through an...CVE-2019-158039.1 Critical
- zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +6 more +8 moreAn issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. By sending a...CVE-2019-158047.5 High
- zyxel 2.00\(abbx.3\)ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly...CVE-2019-158156.5 Medium
- zyxel nbg-418n v2 firmwarewan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly...CVE-2019-173549.4 Critical
- zyxel uag2100 firmware, uag4100 firmware, uag5100 firmware +6 more +8 moreA reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in...CVE-2019-125816.1 Medium
- zyxel uag2100 firmware, uag4100 firmware, uag5100 firmware +11 more +13 moreMissing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices...CVE-2019-12583EPSS 43.9%9.1 Critical
- zyxel p-660hn-t1 firmwareThe rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00...CVE-2019-67259.8 Critical
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by...CVE-2017-183748.8 High
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a...CVE-2017-18372Public exploitEPSS 21.9%8.8 High
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user...CVE-2017-18371Public exploitEPSS 22.5%9.8 Critical
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command...CVE-2017-18370Public exploitEPSS 24.4%8.8 High
- billion 5200w-t firmware, zyxel p660hn-t1a routers, p660hn-t1a v1 firmware +1 more +3 moreThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by...CVE-2017-18368In KEVPublic exploitEPSS 94.5%9.8 Critical
- zyxel atp200 firmware, atp500 firmware, atp800 firmware +18 more +20 moreOn Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110,...CVE-2019-9955Public exploitEPSS 21.2%6.1 Medium
- zyxel nas326 firmwareAn XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated...CVE-2019-106345.4 Medium
- zyxel nas326 firmwareAn eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5...CVE-2019-106338.8 High
- zyxel nas326 firmwareA directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5...CVE-2019-106326.5 Medium
- zyxel nas326 firmwareShell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below...CVE-2019-106318.8 High
- zyxel nas326 firmwareA plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated...CVE-2019-106308.8 High
- zyxel dsl-491hnu-b10b firmware, dsl-491hnu-b1b v2 firmware +1 moreZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.CVE-2019-7391Public exploitEPSS 13.6%8.8 High
- zyxel nbg-418n firmwareZyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.CVE-2019-6710Public exploit8.8 High
- zyxel nsa325 v2 firmwareA system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows...CVE-2018-148938.8 High
- zyxel nsa325 v2 firmwareMissing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2...CVE-2018-148928.8 High
- zyxel vmg1312-b10d firmwareZyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated...CVE-2018-193267.5 High
- zyxel zywall usg 100 firmwareZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi...CVE-2017-175508.8 High
- zyxel vmg3312-b10b firmwareZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+...CVE-2018-187549.8 Critical
- Show moreLoading…