VYPR

Usg Flex 100 Firmware

by Zyxel

CVEs (28)

  • CVE-2023-28771CriKEVApr 25, 2023
    Zyxel
    ATP series
    risk 0.87cvss 9.8epss 0.99

    Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an…

  • CVE-2020-29583CriKEVDec 22, 2020
    Zyxel
    USG
    risk 0.83cvss 9.8epss 0.90

    Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin…

  • CVE-2023-33010CriKEVMay 24, 2023
    Zyxel
    ATP series firmware
    risk 0.78cvss 9.8epss 0.29

    A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions…

  • CVE-2022-0342CriMar 28, 2022
    Zyxel
    ATP series
    risk 0.70cvss 9.8epss 0.84

    An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG…

  • CVE-2021-35029CriJul 2, 2021
    Zyxel
    USG Flex, ATP, and VPN series
    risk 0.64cvss 9.8epss 0.02

    An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands…

  • CVE-2023-33012HigJul 17, 2023
    Zyxel
    ATP series firmware
    risk 0.61cvss 8.8epss 0.10

    A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series…

  • CVE-2023-33011HigJul 17, 2023
    Zyxel
    ATP series
    risk 0.57cvss 8.8epss 0.00

    A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through…

  • CVE-2023-28767HigJul 17, 2023
    Zyxel
    ATP series firmware
    risk 0.57cvss 8.8epss 0.00

    The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36,  USG FLEX 50(W) series firmware versions 5.10 through 5.36, USG20(W)-VPN series firmware…

  • CVE-2023-27991HigApr 24, 2023
    Zyxel
    ATP series firmware
    risk 0.57cvss 8.8epss 0.02

    The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16…

  • CVE-2023-6764HigFeb 20, 2024
    Zyxel
    ATP series firmware
    risk 0.53cvss 8.1epss 0.01

    A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37…

  • CVE-2023-22916HigApr 24, 2023
    Zyxel
    ATP series
    risk 0.53cvss 8.1epss 0.01

    The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00 through 5.35, USG FLEX 50(W) firmware versions 5.10 through 5.35, USG20(W)-VPN firmware versions 5.10 through 5.35, and VPN series firmware versions 5.00…

  • CVE-2023-22913HigApr 24, 2023
    Zyxel
    USG FLEX series
    risk 0.53cvss 8.1epss 0.01

    A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker to modify…

  • CVE-2023-34141HigJul 17, 2023
    Zyxel
    Nxc2500 Firmware
    risk 0.52cvss 8.0epss 0.01

    A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2,…

  • CVE-2023-34138HigJul 17, 2023
    Zyxel
    ATP series firmware
    risk 0.52cvss 8.0epss 0.01

    A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.60 through 5.36 Patch 2, USG20(W)-VPN…

  • CVE-2022-26532HigMay 24, 2022
    Zyxel
    Nxc2500 Firmware
    risk 0.51cvss 7.8epss 0.05

    A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmware versions 4.30 through…

  • CVE-2023-22917HigApr 24, 2023
    Zyxel
    ATP series firmware
    risk 0.49cvss 7.5epss 0.01

    A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50(W) firmware versions 5.10 through 5.32, USG20(W)-VPN firmware versions 5.10 through 5.32,…

  • CVE-2023-22915HigApr 24, 2023
    Zyxel
    USG FLEX series firmware
    risk 0.49cvss 7.5epss 0.01

    A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.30 through 5.35, USG20(W)-VPN firmware versions 4.30 through 5.35, and VPN series firmware versions 4.30…

  • CVE-2023-6398HigFeb 20, 2024
    Zyxel
    Nwa50ax Firmware
    risk 0.47cvss 7.2epss 0.01

    A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37…

  • CVE-2023-22914HigApr 24, 2023
    Zyxel
    USG FLEX series
    risk 0.47cvss 7.2epss 0.01

    A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute…

  • CVE-2022-38547HigFeb 7, 2023
    Zyxel
    ATP series
    risk 0.47cvss 7.2epss 0.03

    A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72, VPN series firmware versions 4.30 through 5.32, USG FLEX series firmware versions 4.50 through 5.32, and ATP series firmware versions 4.32…

Page 1 of 2