Vendor
Zyxel
176 known vulnerabilities.
Products
USG FLEX series firmware 51
ATP series firmware 49
VPN series Firmware 37
USG FLEX 50(W) series firmware 28
USG20(W)-VPN series firmware 28
NAS326 firmware 15
NAS542 firmware 14
USG FLEX 50(W) firmware 11
USG20(W)-VPN firmware 8
USG/Zywall series Firmware 8
VMG8825-T50K firmware 8
VMG3625-T50B firmware 7
WAC500 firmware 7
WBE660S firmware 5
NWA50AX firmware 5
ZyWALL/USG series firmware 5
NBG-418N v2 firmware 5
NR7101 firmware 5
NXC2500 firmware 4
WRE6505 v2 firmware 4
WAH7601 4
GS1900-8 firmware 4
GS1900-48 firmware 4
WX3100-T0 firmware 4
VMG4325-B10A firmware 3
NSG series firmware 3
WAX510D firmware 3
GS1900-8HP firmware 3
GS1900-10HP firmware 3
GS1900-24EP firmware 3
USG FLEX 100(W) firmware 3
USG FLEX 200 firmware 3
USG FLEX 500 firmware 3
USG FLEX 700 firmware 3
USG 20(W)-VPN firmware 3
WAX300H firmware 3
USG FLEX H series uOS firmware 3
NWA110AX firmware 3
WBE530 firmware 2
DX5401-B0 firmware 2
176 results · Feed
-
High 7.2
A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5…
-
High 7.2
A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zy…
-
Critical 9.8
**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-…
-
High 8.8
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the l…
KEV Feb 11, 2025 -
High 8.8
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DS…
KEV Feb 11, 2025 -
High 8.8
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions th…
-
High 7.2
A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG40…
-
Medium 4.9
A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B …
-
High 7.5
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmw…
-
High 7.5CVE-2024-11667 Exploited · Ransomware
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through…
KEV Dec 3, 2024 -
High 7.5
**UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware versio…
-
Medium 4.5
A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and e…
-
Medium 6.8
A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version…
-
Medium 5.5
The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version…
-
Medium 4.9
An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel…
-
Medium 4.9
An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG88…
-
Medium 4.9
An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8…
-
Medium 4.9
An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VM…
-
Critical 9.8
**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware vers…
-
Medium 5.3
An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web auth…
-
Critical 9.8CVE-2024-7261 EPSS 11%
The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmwar…
-
Medium 6.1
A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmwa…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, U…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, U…
-
High 7.5
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX serie…
-
High 8.1
A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 an…
-
Medium 4.9
A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG …
-
High 7.5
A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 co…
-
High 7.5
** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and…
-
Medium 6.5
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions…
-
Medium 6.5
** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zy…
-
Medium 6.7
** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel …
-
Critical 9.8CVE-2024-29974 EPSS 23%
** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel N…
-
Critical 9.8
** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmwa…
-
Critical 9.8
** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS32…
-
Medium 5.5
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local …
-
Medium 6.5
The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow a…
-
High 8.1
A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 th…
-
Medium 5.7
A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series fir…