Advisories · Technology

Zyxel USG FLEX 50(W) firmware.

Every CVE that names Zyxel USG FLEX 50(W) firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-33010 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 24 May 2023
CVE-2023-33009 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 24 May 2023
CVE-2023-27991 CVE record

CVSS 8.8 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 24 Apr 2023
CVE-2023-27990 CVE record

CVSS 4.8 Medium

Cross-site scripting in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Cross-site scripting (XSS)
Not analysed yet 24 Apr 2023
CVE-2023-22918 CVE record

CVSS 6.5 Medium

Exposure of personal information in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Information disclosure
Not analysed yet 24 Apr 2023
CVE-2023-22917 CVE record

CVSS 7.5 High

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 24 Apr 2023
CVE-2023-22916 CVE record

CVSS 8.1 High

Improper input validation in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- CWE-20
Not analysed yet 24 Apr 2023
CVE-2023-22915 CVE record

CVSS 7.5 High

Buffer overflow in Zyxel USG FLEX series firmware and others
- Zyxel USG FLEX series firmware
- Zyxel USG FLEX 50(W) firmware
- Memory corruption
Not analysed yet 24 Apr 2023
CVE-2022-2030 CVE record

CVSS 6.5 Medium

Path traversal in Zyxel USG FLEX 100(W) firmware and others
- Zyxel USG FLEX 100(W) firmware
- Zyxel USG FLEX 200 firmware
- Path traversal
Not analysed yet 19 Jul 2022
CVE-2022-30526 CVE record

CVSS 7.8 High

Improper privilege management in Zyxel USG FLEX 100(W) firmware and others
- Zyxel USG FLEX 100(W) firmware
- Zyxel USG FLEX 200 firmware
- Privilege escalation
Not analysed yet 19 Jul 2022
CVE-2022-30525 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

OS command injection in Zyxel USG FLEX 100(W) firmware and others
- Zyxel USG FLEX 100(W) firmware
- Zyxel USG FLEX 200 firmware
- Command injection
Not analysed yet 12 May 2022