Vendor

Zyxel

176 known vulnerabilities.

Products

USG FLEX series firmware 51 ATP series firmware 49 VPN series Firmware 37 USG FLEX 50(W) series firmware 28 USG20(W)-VPN series firmware 28 NAS326 firmware 15 NAS542 firmware 14 USG FLEX 50(W) firmware 11 USG20(W)-VPN firmware 8 USG/Zywall series Firmware 8 VMG8825-T50K firmware 8 VMG3625-T50B firmware 7 WAC500 firmware 7 WBE660S firmware 5 NWA50AX firmware 5 ZyWALL/USG series firmware 5 NBG-418N v2 firmware 5 NR7101 firmware 5 NXC2500 firmware 4 WRE6505 v2 firmware 4 WAH7601 4 GS1900-8 firmware 4 GS1900-48 firmware 4 WX3100-T0 firmware 4 VMG4325-B10A firmware 3 NSG series firmware 3 WAX510D firmware 3 GS1900-8HP firmware 3 GS1900-10HP firmware 3 GS1900-24EP firmware 3 USG FLEX 100(W) firmware 3 USG FLEX 200 firmware 3 USG FLEX 500 firmware 3 USG FLEX 700 firmware 3 USG 20(W)-VPN firmware 3 WAX300H firmware 3 USG FLEX H series uOS firmware 3 NWA110AX firmware 3 WBE530 firmware 2 DX5401-B0 firmware 2

All Critical High Medium Low Exploited only Public exploit

72 results · Clear filters · Feed

Medium 5.5

CVE-2023-37925

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 …

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Nov 28, 2023
Medium 5.2

CVE-2023-35139

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Nov 28, 2023
Medium 5.5

CVE-2023-35136

An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 throu…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Nov 28, 2023
Medium 5.5

CVE-2023-35140

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could al…

Zyxel GS1900-24EP firmware Network devices

Nov 7, 2023
Medium 6.5

CVE-2023-28768

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.…

Zyxel XMG1930-30 firmware XGS2220-30 firmware XS1930-10 firmware Network devices

Aug 14, 2023
Medium 6.5

CVE-2023-34140

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series fi…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Jul 17, 2023
Medium 6.5

CVE-2023-27989

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could…

Zyxel NR7101 firmware Network devices

Jun 5, 2023
Medium 6.7

CVE-2022-45853

The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware…

Zyxel GS1900-8 firmware GS1900-8HP firmware Network devices

May 30, 2023
Medium 4.9

CVE-2023-22924

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remo…

Zyxel NBG-418N v2 firmware Network devices

May 1, 2023
Medium 6.5

CVE-2023-22923

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could al…

Zyxel NBG-418N v2 firmware Network devices

May 1, 2023
Medium 4.8

CVE-2023-27990

The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series f…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 24, 2023
Medium 6.5

CVE-2023-22918

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 …

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 24, 2023
Medium 6.1

CVE-2022-45441

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which coul…

Zyxel NBG-418N v2 firmware Network devices

Feb 7, 2023
Medium 4.3

CVE-2022-45854

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow…

Zyxel NWA110AX firmware Network devices

Feb 7, 2023
Medium 4.4

CVE-2022-45440

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symb…

Zyxel AX7501-B0 firmware Network devices

Jan 17, 2023
Medium 6.5

CVE-2022-45439

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABP…

Zyxel AX7501-B0 firmware Network devices

Jan 17, 2023
Medium 5.4

CVE-2022-43390

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could all…

Zyxel NR7101 firmware Network devices

Jan 11, 2023
Medium 6.5

CVE-2022-43392

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which…

Zyxel NR7101 firmware Network devices

Jan 11, 2023
Medium 6.5

CVE-2022-43391

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, …

Zyxel NR7101 firmware Network devices

Jan 11, 2023
Medium 5.3

CVE-2022-38546

A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unau…

Zyxel NBG7510 firmware Network devices

Dec 21, 2022
Medium 4.7

CVE-2022-40603

A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Dec 6, 2022
Medium 5.9

CVE-2022-34746

An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pai…

Zyxel Zyxel GS1900 series firmware Network devices

Sep 20, 2022
Medium 6.5

CVE-2022-2030

A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was ident…

Zyxel ATP series firmware VPN series Firmware USG FLEX 50(W) firmware Network devices

Jul 19, 2022
Medium 6.2

CVE-2022-0823

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker…

Zyxel Zyxel GS1200 series firmware Network devices

Jun 7, 2022
Medium 6.5

CVE-2022-0910

A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/Z…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

May 24, 2022
Medium 5.8

CVE-2022-0734

A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.3…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

May 24, 2022
Medium 6.1

CVE-2022-26531

Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versi…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

May 24, 2022
Medium 6.0

CVE-2022-26414

A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware vers…

Zyxel VMG3312-T20A firmware Network devices

Apr 11, 2022
Medium 6.5

CVE-2021-35036 Public exploit

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allo…

Zyxel VMG3625-T50B firmware Network devices

Mar 1, 2022
Medium 4.9

CVE-2021-35035

A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenti…

Zyxel NBG6604 series firmware Network devices

Dec 29, 2021
Medium 6.4

CVE-2021-35032

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local …

Zyxel GS1900 series firmware Network devices

Dec 28, 2021
Medium 6.8

CVE-2021-35031

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmwar…

Zyxel GS1900 series firmware XGS1250 series firmware XGS1210 series firmware Network devices

Dec 28, 2021

Zyxel

Products

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 …

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.…

An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 throu…

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could al…

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.…

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series fi…

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could…

The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware…

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remo…

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could al…

The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series f…

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 …

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which coul…

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow…

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symb…

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABP…

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could all…

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which…

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, …

A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unau…

A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through…

An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pai…

A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was ident…

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker…

A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/Z…

A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.3…

Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versi…

A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware vers…

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allo…

A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenti…

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local …

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmwar…