Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in der Zyxel Firewall ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen oder Cross-Stie Scripting-Angriffe durchzuführen.
Product
Zyxel ist ein Hersteller von Netzwerkkomponenten, u.a. von Firewalls.
Vulnerabilities 7
-
High 8.1
A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.…
-
High 7.5
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX serie…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, U…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, U…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 an…
-
Medium 6.1
A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmwa…
-
Medium 4.9
A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG …
Revision history
-
#2
Zyxel meldet aktive Ausnutzung
-
#1
Initiale Fassung
References
-
Zyxel security advisory vom 2024-09-02
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-09-03-2024
-
Zyxel security advisory vom 2024-11-20
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-21-2024