Description
An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zyxel | USG/Zywall series Firmware | 4.35 through 4.64 | — |
| Zyxel | USG FLEX series Firmware | 4.35 through 5.01 | — |
| Zyxel | ATP series Firmware | 4.35 through 5.01 | — |
| Zyxel | VPN series Firmware | 4.35 through 5.01 | — |