Advisories · Technology
Zyxel USG/ZyWALL series firmware.
Every CVE that names Zyxel USG/ZyWALL series firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Path traversal in Zyxel USG FLEX 100(W) firmware and others
- Zyxel USG FLEX 100(W) firmware
- Zyxel USG FLEX 200 firmware
- Path traversal
- CVSS 7.8 High
Improper privilege management in Zyxel USG FLEX 100(W) firmware and others
- Zyxel USG FLEX 100(W) firmware
- Zyxel USG FLEX 200 firmware
- Privilege escalation
- CVSS 7.8 High
Argument injection in Zyxel USG/ZyWALL series firmware and others
- Zyxel USG/ZyWALL series firmware
- Zyxel USG FLEX series firmware
- Command injection
- CVSS 6.5 Medium
Improper authentication in Zyxel USG/ZyWALL series firmware and others
- Zyxel USG/ZyWALL series firmware
- Zyxel USG FLEX series firmware
- Authentication bypass
- CVSS 5.8 Medium
Cross-site scripting in Zyxel USG/ZyWALL series firmware and others
- Zyxel USG/ZyWALL series firmware
- Zyxel USG FLEX series firmware
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Improper input validation in Zyxel USG/ZyWALL series firmware and others
- Zyxel USG/ZyWALL series firmware
- Zyxel USG FLEX series firmware
- CWE-20
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Improper authentication in Zyxel USG/ZyWALL series firmware and others
- Zyxel USG/ZyWALL series firmware
- Zyxel USG FLEX series firmware
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper authentication in Zyxel USG/Zywall series Firmware and others
- Zyxel USG/Zywall series Firmware
- Zyxel USG FLEX series Firmware
- Authentication bypass