Vendor
Zyxel
176 known vulnerabilities.
Products
USG FLEX series firmware 51
ATP series firmware 49
VPN series Firmware 37
USG FLEX 50(W) series firmware 28
USG20(W)-VPN series firmware 28
NAS326 firmware 15
NAS542 firmware 14
USG FLEX 50(W) firmware 11
USG20(W)-VPN firmware 8
USG/Zywall series Firmware 8
VMG8825-T50K firmware 8
VMG3625-T50B firmware 7
WAC500 firmware 7
WBE660S firmware 5
NWA50AX firmware 5
ZyWALL/USG series firmware 5
NBG-418N v2 firmware 5
NR7101 firmware 5
NXC2500 firmware 4
WRE6505 v2 firmware 4
WAH7601 4
GS1900-8 firmware 4
GS1900-48 firmware 4
WX3100-T0 firmware 4
VMG4325-B10A firmware 3
NSG series firmware 3
WAX510D firmware 3
GS1900-8HP firmware 3
GS1900-10HP firmware 3
GS1900-24EP firmware 3
USG FLEX 100(W) firmware 3
USG FLEX 200 firmware 3
USG FLEX 500 firmware 3
USG FLEX 700 firmware 3
USG 20(W)-VPN firmware 3
WAX300H firmware 3
USG FLEX H series uOS firmware 3
NWA110AX firmware 3
WBE530 firmware 2
DX5401-B0 firmware 2
176 results · Feed
-
High 7.2
A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions f…
-
Medium 6.5
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG F…
-
High 7.2CVE-2023-5372 EPSS 28%
The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and …
-
Critical 9.8CVE-2023-4474 EPSS 30%
The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C…
-
Critical 9.8CVE-2023-4473 EPSS 41%
A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 fi…
-
High 8.8CVE-2023-37928 EPSS 60%
A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZ…
-
High 8.8
The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C…
-
Critical 9.8CVE-2023-35138 EPSS 40%
A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5…
-
High 7.5
An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.1…
-
Medium 5.5
An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.…
-
Medium 5.5
An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 …
-
Medium 5.5
An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37,…
-
High 7.5
An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel…
-
Medium 4.4
A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, U…
-
Medium 5.5
A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware v…
-
Medium 5.5
An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 …
-
Medium 5.2
A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.…
-
Medium 5.5
An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 throu…
-
High 7.8
The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could a…
-
Medium 5.5
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could al…
-
High 7.5
** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.…
-
High 8.8
A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1…
-
Medium 6.5
Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.…
-
High 8.0
A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions…
-
Medium 6.5
A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series fi…
-
High 8.8
A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions …
-
High 8.0
A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 thro…
-
High 8.8CVE-2023-33012 Public exploit
A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.…
-
High 8.8
A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firm…
-
High 8.8
The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through…
-
Critical 9.8
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0,…
KEV Jun 23, 2023 -
Medium 6.5
A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could…
-
Medium 6.7
The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware…
-
High 7.2
The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0…
-
Critical 9.8
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Pa…
KEV Jun 5, 2023 -
Critical 9.8
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 P…
KEV Jun 5, 2023 -
Medium 4.9
A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remo…
-
Medium 6.5
A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could al…
-
High 8.8
The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could all…
-
High 7.5
A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remo…