Unrated severityNVD Advisory· Published Mar 28, 2022· Updated Aug 2, 2024

CVE-2022-0342

Description

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.

Affected products

Zyxel/ATP seriescpe-rescue
Range: 4.32 through 5.20
Zyxel/NSG series firmwarev5
Range: 1.20 through 1.33 Patch 4
Zyxel/USG FLEX seriescpe-rescue
Range: 4.50 through 5.20
Zyxel/ZyWALL/USG seriescpe-rescue
Range: 4.20 through 4.70
Zyxel/VPN seriescpe-rescue
Range: 4.30 through 5.20

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.zyxel.com/support/Zyxel-security-advisory-for-authentication-bypass-vulnerability-of-firewalls.shtmlmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.074
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000