CVE-2022-0910

🗓️ 24 May 2022 02:20:13Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 130 Views

Downgrade from 2FA to 1FA vulnerability in Zyxel USG/ZyWALL, USG FLEX, ATP, and VPN series firmware versions 4.32-5.21 allows bypass of 2nd authentication phase for IPsec VPN serve

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-0910	24 May 202203:15	–	attackerkb
Circl	CVE-2022-0910	24 May 202207:36	–	circl
CNNVD	Zyxel USG/ZyWALL 授权问题漏洞	24 May 202200:00	–	cnnvd
Cvelist	CVE-2022-0910	24 May 202202:20	–	cvelist
EUVD	EUVD-2022-15940	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel products	25 May 202200:00	–	ncsc
NVD	CVE-2022-0910	24 May 202203:15	–	nvd
Prion	Authentication flaw	24 May 202203:15	–	prion
RedhatCVE	CVE-2022-0910	22 May 202522:17	–	redhatcve
The Hacker News	Zyxel Issues Patches for 4 New Flaws Affecting AP, API Controller, and Firewall Devices	27 May 202207:28	–	thn

NVD

Node

zyxel vpn100_firmwareRange4.32–5.21

AND

zyxel vpn100Match-

Node

zyxel vpn1000_firmwareRange4.32–5.21

AND

zyxel vpn1000Match-

Node

zyxel vpn300_firmwareRange4.32–5.21

AND

zyxel vpn300Match-

Node

zyxel vpn50_firmwareRange4.32–5.21

AND

zyxel vpn50Match-

Node

zyxel atp100_firmwareRange4.32–5.21

AND

zyxel atp100Match-

Node

zyxel atp100w_firmwareRange4.32–5.21

AND

zyxel atp100wMatch-

Node

zyxel atp200_firmwareRange4.32–5.21

AND

zyxel atp200Match-

Node

zyxel atp500_firmwareRange4.32–5.21

AND

zyxel atp500Match-

Node

zyxel atp700_firmwareRange4.32–5.21

AND

zyxel atp700Match-

Node

zyxel atp800_firmwareRange4.32–5.21

AND

zyxel atp800Match-

Node

zyxel usg_110_firmwareRange4.32–4.71

AND

zyxel usg_110Match-

Node

zyxel usg_1100_firmwareRange4.32–4.71

AND

zyxel usg_1100Match-

Node

zyxel usg_1900_firmwareRange4.32–4.71

AND

zyxel usg_1900Match-

Node

zyxel usg_20w_firmwareRange4.32–4.71

AND

zyxel usg_20wMatch-

Node

zyxel usg_20w-vpn_firmwareRange4.32–4.71

AND

zyxel usg_20w-vpnMatch-

Node

zyxel usg_2200-vpn_firmwareRange4.32–4.71

AND

zyxel usg_2200-vpnMatch-

Node

zyxel usg_310_firmwareRange4.32–4.71

AND

zyxel usg_310Match-

Node

zyxel usg_40_firmwareRange4.32–4.71

AND

zyxel usg_40Match-

Node

zyxel usg_40w_firmwareRange4.32–4.71

AND

zyxel usg_40wMatch-

Node

zyxel usg_60_firmwareRange4.32–4.71

AND

zyxel usg_60Match-

Node

zyxel usg_60w_firmwareRange4.32–4.71

AND

zyxel usg_60wMatch-

Node

zyxel usg_flex_100_firmwareRange4.50–5.21

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_100w_firmwareRange4.50–5.21

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_200_firmwareRange4.50–5.21

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_500_firmwareRange4.50–5.21

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_700_firmwareRange4.50–5.21

AND

zyxel usg_flex_700Match-

Node

zyxel usg200_firmwareRange4.32–4.71

AND

zyxel usg200Match-

Node

zyxel usg20_firmwareRange4.32–4.71

AND

zyxel usg20Match-

Node

zyxel usg210_firmwareRange4.32–4.71

AND

zyxel usg210Match-

Node

zyxel usg2200_firmwareRange4.32–4.71

AND

zyxel usg2200Match-

Node

zyxel usg300_firmwareRange4.32–4.71

AND

zyxel usg300Match-

Node

zyxel usg310_firmwareRange4.32–4.71

AND

zyxel usg310Match-

[
  {
    "product": "USG/ZyWALL series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.32 through 4.71"
      }
    ]
  },
  {
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.50 through 5.21"
      }
    ]
  },
  {
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.32 through 5.21"
      }
    ]
  },
  {
    "product": "VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.32 through 5.21"
      }
    ]
  }
]