Advisories · Technology

Zyxel ZyWALL/USG series firmware.

Every CVE that names Zyxel ZyWALL/USG series firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-33010 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 24 May 2023
CVE-2023-33009 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 24 May 2023
CVE-2023-28771 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

OS command injection in Zyxel ZyWALL/USG series firmware and others
- Zyxel ZyWALL/USG series firmware
- Zyxel VPN series firmware
- Command injection
Not analysed yet 25 Apr 2023
CVE-2022-38547 CVE record

CVSS 7.2 High

OS command injection in Zyxel ZyWALL/USG series firmware and others
- Zyxel ZyWALL/USG series firmware
- Zyxel VPN series firmware
- Command injection
Not analysed yet 7 Feb 2023
CVE-2022-40603 CVE record

CVSS 4.7 Medium

Cross-site scripting in Zyxel ZyWALL/USG series firmware and others
- Zyxel ZyWALL/USG series firmware
- Zyxel VPN series firmware
- Cross-site scripting (XSS)
Not analysed yet 6 Dec 2022