Advisories · Technology

Zyxel WAC500 firmware.

Every CVE that names Zyxel WAC500 firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-7261 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in Zyxel NWA1123ACv3 firmware and others
- Zyxel NWA1123ACv3 firmware
- Zyxel WAC500 firmware
- Command injection
Not analysed yet 3 Sept 2024
CVE-2023-6398 CVE record

CVSS 7.2 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 20 Feb 2024
CVE-2023-5797 CVE record

CVSS 5.5 Medium

Improper privilege management in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Privilege escalation
Not analysed yet 28 Nov 2023
CVE-2023-37925 CVE record

CVSS 5.5 Medium

Improper privilege management in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Privilege escalation
Not analysed yet 28 Nov 2023
CVE-2023-22918 CVE record

CVSS 6.5 Medium

Exposure of personal information in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Information disclosure
Not analysed yet 24 Apr 2023
CVE-2022-26532 CVE record

CVSS 7.8 High

Argument injection in Zyxel USG/ZyWALL series firmware and others
- Zyxel USG/ZyWALL series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 24 May 2022
CVE-2022-26531 CVE record

CVSS 6.1 Medium

Improper input validation in Zyxel USG/ZyWALL series firmware and others
- Zyxel USG/ZyWALL series firmware
- Zyxel USG FLEX series firmware
- CWE-20
Not analysed yet 24 May 2022