VYPR
← All advisories
High severity7.2NVD Advisory· Published Feb 7, 2023· Updated Jun 17, 2026

CVE-2022-38547

CVE-2022-38547

Description

A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72, VPN series firmware versions 4.30 through 5.32, USG FLEX series firmware versions 4.50 through 5.32, and ATP series firmware versions 4.32 through 5.32, which could allow an authenticated attacker with administrator privileges to execute OS commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Zyxel/VPN seriesllm-fuzzy2 versions
    4.30 - 5.32+ 1 more
    • (no CPE)range: 4.30 - 5.32
    • (no CPE)range: 4.30 through 5.32
  • Zyxel/ZyWALL/USG seriesllm-fuzzy2 versions
    4.20 - 4.72+ 1 more
    • (no CPE)range: 4.20 - 4.72
    • (no CPE)range: 4.20 through 4.72
  • Zyxel/ATP seriesllm-fuzzy2 versions
    4.32 - 5.32+ 1 more
    • (no CPE)range: 4.32 - 5.32
    • (no CPE)range: 4.32 through 5.32
  • Zyxel/USG FLEX seriesllm-fuzzy2 versions
    4.50 - 5.32+ 1 more
    • (no CPE)range: 4.50 - 5.32
    • (no CPE)range: 4.50 through 5.32

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.