Skip to contentZyxel vulnerabilities
Products
Show 140 moreShow less
Newest
- zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreMultiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL...CVE-2022-265316.1 Medium
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +19 more +21 moreA OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware...CVE-2022-30525In KEVPublic exploitEPSS 99.9%9.8 Critical
- zyxel vmg3312-t20a firmware, ax7501-b0 firmware, dx5401-b0 firmware +29 more +31 moreA potential buffer overflow vulnerability was identified in some internal functions of Zyxel...CVE-2022-264146.0 Medium
- zyxel vmg3312-t20a firmware, ax7501-b0 firmware, dx5401-b0 firmware +29 more +31 moreA command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30...CVE-2022-264138.0 High
- zyxel ap configurator (zac), ap configurator +1 moreA local privilege escalation vulnerability caused by incorrect permission assignment in some...CVE-2022-05567.3 High
- zyxel atp series firmware, nsg series firmware, usg flex series firmware +25 more +27 moreAn authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware...CVE-2022-0342EPSS 95.1%9.8 Critical
- zyxel zywall 2 plus internet security appliance firmwareZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS)....CVE-2021-46387Public exploitEPSS 21.0%6.1 Medium
- zyxel nwa1100-nh firmwareA command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could...CVE-2021-4039Public exploitEPSS 71.0%9.8 Critical
- zyxel vmg3625-t50b firmware, ax7501-b0 firmware, dx3301-t0 firmware +28 more +30 moreA command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could...CVE-2021-35036Public exploit6.5 Medium
- zyxel armor z1 (nbg6816) firmware, armor z2 (nbg6817) firmware, nbg6816 firmware +1 more +3 moreA command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could...CVE-2021-40298.8 High
- zyxel armor z1 (nbg6816) firmware, armor z2 (nbg6817) firmware, nbg6816 firmware +1 more +3 moreA cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware...CVE-2021-40308.0 High
- zyxel nbg6604 firmware, nbg6604 series firmware +1 moreA cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could...CVE-2021-350354.9 Medium
- zyxel nbg6604 firmware, nbg6604 series firmware +1 moreAn insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware...CVE-2021-350347.4 High
- zyxel gs1900 series firmware, gs1900-10hp firmware, gs1900-16 firmware +10 more +12 moreA vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow...CVE-2021-350326.4 Medium
- zyxel gs1900 series firmware, xgs1210 series firmware, xgs1250 series firmware +14 more +16 moreA vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and...CVE-2021-350316.8 Medium
- zyxel wsr30 firmware, nbg6818 series firmware, nbg6818 firmware +9 more +11 moreA vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30...CVE-2021-350337.8 High
- zyxel zywall vpn2s firmwareA command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12...CVE-2021-350287.3 High
- zyxel zywall vpn2s firmwareA directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12...CVE-2021-350277.5 High
- zyxel gs1900-8 firmware, gs1900-10hp firmware, gs1900-16 firmware +9 more +11 moreA vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did...CVE-2021-350303.5 Low
- zyxel usg/zywall series firmware, vpn series firmware, atp series firmware +38 more +40 moreAn authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall...CVE-2021-350299.8 Critical
- zyxel lte4506-m606 firmware, lte7460-m608 firmware, wah7706 firmware +2 moreThe Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication,...CVE-2020-288999.1 Critical
- zyxel nbg2105 firmwareOn Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator...CVE-2021-3297EPSS 20.5%7.8 High
- zyxel vpn orchestrator, zld, nsg firmware +1 more +3 moreCertain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd...CVE-2020-292997.2 High
- zyxel atp100 firmware, atp100w firmware, atp200 firmware +28 more +30 moreFirmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an...CVE-2020-29583In KEVPublic exploitEPSS 90.0%9.8 Critical
- zyxel p1302-t10 v3 firmwareInsecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00...CVE-2020-201837.5 High
- zyxel access points firmware, zld +1 moreA stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways...CVE-2020-250149.8 Critical
- zyxel vmg5313-b30b firmwareZyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of...CVE-2020-243559.8 Critical
- zyxel vmg5313-b30b firmwareZyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of...CVE-2020-243548.8 High
- zyxel nas326 firmware, nas520 firmware, nas540 firmware +1 more +3 moreCertain Zyxel products have a locally accessible binary that allows a non-root user to generate a...CVE-2020-133658.4 High
- zyxel nas326 firmware, nas520 firmware, nas540 firmware +1 more +3 moreA backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects...CVE-2020-133646.5 Medium
- zyxel cloud cnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config...CVE-2020-153249.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account...CVE-2020-153239.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the...CVE-2020-153229.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.CVE-2020-153219.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.CVE-2020-153209.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...CVE-2020-153195.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...CVE-2020-153185.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...CVE-2020-153175.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...CVE-2020-153165.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...CVE-2020-153155.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.CVE-2020-153145.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.CVE-2020-153135.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.CVE-2020-153125.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.CVE-2020-153329.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL ...CVE-2020-153335.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log...CVE-2020-153345.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.CVE-2020-153357.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.CVE-2020-153367.5 High
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query...CVE-2020-153375.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query...CVE-2020-153385.3 Medium
- Show moreLoading…