CVE-2022-30525

🗓️ 12 May 2022 13:05:11Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1668 Views🌐 WEB

OS command injection vulnerability in Zyxel USG FLEX firmware versions 5.00 through 5.21 Patch

Reporter	Title	Published	Views	Family All 55
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	15 Jan 202320:02	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	13 Jun 202221:11	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	13 May 202212:58	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	23 May 202216:51	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	16 May 202209:15	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	28 May 202207:19	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	13 May 202218:16	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	15 May 202206:20	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	13 May 202212:03	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware	12 Jun 202219:04	–	githubexploit

NVD

Node

zyxel usg_flex_100w_firmwareRange5.00–5.30

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_200_firmwareRange5.00–5.30

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_500_firmwareRange5.00–5.30

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_700_firmwareRange5.00–5.30

AND

zyxel usg_flex_700Match-

Node

zyxel vpn100_firmwareRange4.60–5.30

AND

zyxel vpn100Match-

Node

zyxel vpn1000_firmwareRange4.60–5.30

AND

zyxel vpn1000Match-

Node

zyxel vpn300_firmwareRange4.60–5.30

AND

zyxel vpn300Match-

Node

zyxel vpn50_firmwareRange4.60–5.30

AND

zyxel vpn50Match-

Node

zyxel atp100_firmwareRange5.10–5.30

AND

zyxel atp100Match-

Node

zyxel atp100w_firmwareRange5.10–5.30

AND

zyxel atp100wMatch-

Node

zyxel atp200_firmwareRange5.10–5.30

AND

zyxel atp200Match-

Node

zyxel atp500_firmwareRange5.10–5.30

AND

zyxel atp500Match-

Node

zyxel atp700_firmwareRange5.10–5.30

AND

zyxel atp700Match-

Node

zyxel atp800_firmwareRange5.10–5.30

AND

zyxel atp800Match-

Node

zyxel usg_flex_50w_firmwareRange5.10–5.30

AND

zyxel usg_flex_50wMatch-

Node

zyxel usg20w-vpn_firmwareRange5.10–5.30

AND

zyxel usg20w-vpnMatch-

[
  {
    "product": "USG FLEX 100(W) firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.00 through 5.21 Patch 1"
      }
    ]
  },
  {
    "product": "USG FLEX 200 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.00 through 5.21 Patch 1"
      }
    ]
  },
  {
    "product": "USG FLEX 500 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.00 through 5.21 Patch 1"
      }
    ]
  },
  {
    "product": "USG FLEX 700 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.00 through 5.21 Patch 1"
      }
    ]
  },
  {
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.10 through 5.21 Patch 1"
      }
    ]
  },
  {
    "product": "VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.60 through 5.21 Patch 1"
      }
    ]
  },
  {
    "product": "USG FLEX 50(W) firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.10 through 5.21 Patch 1"
      }
    ]
  },
  {
    "product": "USG 20(W)-VPN firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.10 through 5.21 Patch 1"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/167176/Zyxel-Remote-Command-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html
packetstormsecurity	www.packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.html
zyxel	www.zyxel.com/support/Zyxel-security-advisory-for-OS-command-injection-vulnerability-of-firewalls.shtml
packetstormsecurity	www.packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog