Advisories · Technology

Zyxel ZyWALL VPN2S Firmware.

Every CVE that names Zyxel ZyWALL VPN2S Firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-35028 CVE record

CVSS 7.3 High

OS command injection in Zyxel ZyWALL VPN2S Firmware
- Zyxel ZyWALL VPN2S Firmware
- Command injection
Not analysed yet 29 Sept 2021
CVE-2021-35027 CVE record

CVSS 7.5 High

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.
- Zyxel ZyWALL VPN2S Firmware
- CWE-27
Not analysed yet 29 Sept 2021