Zyxel

176 results · Feed

• Critical 9.8
  CVE-2021-4039 Public exploit EPSS 71%

  A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exe…

  Zyxel NWA1100-NH firmware Network devices
  Mar 1, 2022
• Medium 6.5
  CVE-2021-35036 Public exploit

  A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allo…

  Zyxel VMG3625-T50B firmware Network devices
  Mar 1, 2022
• High 8.8
  CVE-2021-4029

  A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execu…

  Zyxel ARMOR Z1 (NBG6816) firmware ARMOR Z2 (NBG6817) firmware Network devices
  Feb 22, 2022
• High 8.0
  CVE-2021-4030

  A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker…

  Zyxel ARMOR Z2 (NBG6817) firmware ARMOR Z1 (NBG6816) firmware Network devices
  Feb 22, 2022
• Medium 4.9
  CVE-2021-35035

  A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenti…

  Zyxel NBG6604 series firmware Network devices
  Dec 29, 2021
• High 7.4
  CVE-2021-35034

  An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote …

  Zyxel NBG6604 series firmware Network devices
  Dec 29, 2021
• Medium 6.4
  CVE-2021-35032

  A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local …

  Zyxel GS1900 series firmware Network devices
  Dec 28, 2021
• Medium 6.8
  CVE-2021-35031

  A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmwar…

  Zyxel GS1900 series firmware XGS1250 series firmware XGS1210 series firmware Network devices
  Dec 28, 2021
• High 7.8
  CVE-2021-35033

  A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-config…

  Zyxel NBG7815 series firmware WSQ50 series firmware WSR30 series firmware Network devices
  Nov 23, 2021
• High 7.3
  CVE-2021-35028

  A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authentica…

  Zyxel ZyWALL VPN2S Firmware Network devices
  Sep 29, 2021
• High 7.5
  CVE-2021-35027

  A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote att…

  Zyxel ZyWALL VPN2S Firmware Network devices
  Sep 29, 2021
• Low 3.5
  CVE-2021-35030

  A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize …

  Zyxel GS1900-8 firmware Network devices
  Jul 26, 2021
• Critical 9.8
  CVE-2021-35029

  An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versi…

  Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
  Jul 2, 2021
• Critical 9.8
  CVE-2020-9054 Exploited Public exploit Scanner template EPSS 100%

  ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

  Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS de…

  Zyxel NAS540 NSA325v2 NSA210 Network devices
  Mar 4, 2020

  KEV Mar 25, 2022
• Unscored —
  CVE-2018-1164

  This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL …

  Zyxel ZyXEL P-870H-51 DSL Router Network devices
  Feb 21, 2018
• Unscored —
  CVE-2017-3216

  WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication byp…

  Huawei Zyxel ZTE Green Packet Network devices
  Jun 20, 2017