Vendor

Zyxel

176 known vulnerabilities.

Products

USG FLEX series firmware 51 ATP series firmware 49 VPN series Firmware 37 USG FLEX 50(W) series firmware 28 USG20(W)-VPN series firmware 28 NAS326 firmware 15 NAS542 firmware 14 USG FLEX 50(W) firmware 11 USG20(W)-VPN firmware 8 USG/Zywall series Firmware 8 VMG8825-T50K firmware 8 VMG3625-T50B firmware 7 WAC500 firmware 7 WBE660S firmware 5 NWA50AX firmware 5 ZyWALL/USG series firmware 5 NBG-418N v2 firmware 5 NR7101 firmware 5 NXC2500 firmware 4 WRE6505 v2 firmware 4 WAH7601 4 GS1900-8 firmware 4 GS1900-48 firmware 4 WX3100-T0 firmware 4 VMG4325-B10A firmware 3 NSG series firmware 3 WAX510D firmware 3 GS1900-8HP firmware 3 GS1900-10HP firmware 3 GS1900-24EP firmware 3 USG FLEX 100(W) firmware 3 USG FLEX 200 firmware 3 USG FLEX 500 firmware 3 USG FLEX 700 firmware 3 USG 20(W)-VPN firmware 3 WAX300H firmware 3 USG FLEX H series uOS firmware 3 NWA110AX firmware 3 WBE530 firmware 2 DX5401-B0 firmware 2

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 8.8

CVE-2024-40891 Exploited Public exploit EPSS 23%

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the l…

Zyxel VMG4325-B10A firmware Network devices

Feb 4, 2025
KEV Feb 11, 2025
Critical 9.8

CVE-2023-28771 Exploited Public exploit EPSS 99%

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 25, 2023
KEV May 31, 2023
Critical 9.8

CVE-2022-30525 Exploited Public exploit Scanner template EPSS 100%

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pa…

Zyxel ATP series firmware VPN series Firmware USG FLEX 50(W) firmware Network devices

May 12, 2022
KEV May 16, 2022
Critical 9.8

CVE-2020-9054 Exploited Public exploit Scanner template EPSS 100%

ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS de…

Zyxel NSA320S NAS540 NSA325v2 Network devices

Mar 4, 2020
KEV Mar 25, 2022