High · 7.5 CVE-2021-35027 EUVD-2021-21674GHSA-gf8r-6336-2wmx

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access…

Published Sep 29, 2021 · Updated Aug 4, 2024 · Assigned by Zyxel

Vendor: Zyxel Product: ZyWALL VPN2S Firmware Category: Network devices

Description

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	ZyWALL VPN2S Firmware	1.12(ABLN.0)C0	—

References

https://www.zyxel.com/support/Zyxel_security_advisory_for_directory_traversal_and_command_injection_vulnerabilities_of_VPN2S_Firewall.shtml