Vendor
Zyxel
176 known vulnerabilities.
Products
USG FLEX series firmware 51
ATP series firmware 49
VPN series Firmware 37
USG FLEX 50(W) series firmware 28
USG20(W)-VPN series firmware 28
NAS326 firmware 15
NAS542 firmware 14
USG FLEX 50(W) firmware 11
USG20(W)-VPN firmware 8
USG/Zywall series Firmware 8
VMG8825-T50K firmware 8
VMG3625-T50B firmware 7
WAC500 firmware 7
WBE660S firmware 5
NWA50AX firmware 5
ZyWALL/USG series firmware 5
NBG-418N v2 firmware 5
NR7101 firmware 5
NXC2500 firmware 4
WRE6505 v2 firmware 4
WAH7601 4
GS1900-8 firmware 4
GS1900-48 firmware 4
WX3100-T0 firmware 4
VMG4325-B10A firmware 3
NSG series firmware 3
WAX510D firmware 3
GS1900-8HP firmware 3
GS1900-10HP firmware 3
GS1900-24EP firmware 3
USG FLEX 100(W) firmware 3
USG FLEX 200 firmware 3
USG FLEX 500 firmware 3
USG FLEX 700 firmware 3
USG 20(W)-VPN firmware 3
WAX300H firmware 3
USG FLEX H series uOS firmware 3
NWA110AX firmware 3
WBE530 firmware 2
DX5401-B0 firmware 2
176 results · Feed
-
High 7.5
A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could a…
-
High 7.5
The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmw…
-
Critical 9.8CVE-2023-28769 Public exploit
The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware …
-
Critical 9.8
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…
KEV May 31, 2023 -
High 8.8
The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 t…
-
Medium 4.8
The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series f…
-
High 7.2
A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 t…
-
Medium 6.5
A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 …
-
High 7.5
A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32…
-
High 8.1
The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.0…
-
High 7.5
A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50…
-
High 8.1
A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX serie…
-
Critical 9.8
A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a fa…
-
High 7.2
A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4…
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which coul…
-
Medium 4.3
An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow…
-
Medium 4.4
A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symb…
-
Medium 6.5
A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABP…
-
Medium 5.4
A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could all…
-
High 8.6
A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, whi…
-
Medium 6.5
A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which…
-
Medium 6.5
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, …
-
High 8.2
An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 fi…
-
Medium 5.3
A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unau…
-
Medium 4.7
A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through…
-
Critical 9.8
A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the…
-
Medium 5.9
An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pai…
-
Critical 9.8
A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to ac…
-
Medium 6.5
A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was ident…
-
High 7.8CVE-2022-30526 Public exploit
A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 …
-
Medium 6.2
An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker…
-
High 7.8
A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 …
-
Medium 6.5
A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/Z…
-
Medium 5.8
A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.3…
-
Medium 6.1
Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versi…
-
Critical 9.8
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pa…
KEV May 16, 2022 -
Medium 6.0
A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware vers…
-
High 8.0
A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow …
-
High 7.3
A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel A…
-
Critical 9.8
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.7…