EUVD-2022-34334

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Directory traversal vulnerability in Zyxel firmware allowing access to restricted files by authenticated attackers

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-2030	19 Jul 202206:15	–	attackerkb
BDU FSTEC	The vulnerability of microprogrammed network device software from Zyxel models USG FLEX 100(W), USG FLEX 200, USG FLEX 500, USG FLEX 700, USG FLEX 50(W), USG20(W)-VPN, ATP, VPN, USG/ZyWALL arises due to incorrect path name restrictions in the access-controlled catalog. This allows attackers to disclose sensitive information.	31 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-2030	19 Jul 202212:40	–	circl
CNNVD	Zyxel USG FLEX 路径遍历漏洞	19 Jul 202200:00	–	cnnvd
CVE	CVE-2022-2030	19 Jul 202205:55	–	cve
Cvelist	CVE-2022-2030	19 Jul 202205:55	–	cvelist
NCSC	Vulnerabilities fixed in Zyxel products	20 Jul 202200:00	–	ncsc
NVD	CVE-2022-2030	19 Jul 202206:15	–	nvd
OSV	CVE-2022-2030	19 Jul 202206:15	–	osv
Prion	Directory traversal	19 Jul 202206:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "e3bf14db-d5ef-30f9-8459-2640d66568b8",
        "vendor": {
          "name": "Zyxel"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "05ad99b6-a766-3fd3-98d8-ecb04fe6f38d",
        "product": {
          "name": "VPN series Firmware"
        },
        "product_version": "4.30 through 5.30"
      },
      {
        "id": "080a2172-a9cc-3807-b6ec-9980647934be",
        "product": {
          "name": "USG 20(W)-VPN firmware"
        },
        "product_version": "4.16 through 5.30"
      },
      {
        "id": "7aa93a8d-86a5-31c1-9231-05431616762d",
        "product": {
          "name": "USG FLEX 500 firmware"
        },
        "product_version": "4.50 through 5.30"
      },
      {
        "id": "82f0ed09-8da5-345f-80a8-6c4ce62ae2bc",
        "product": {
          "name": "USG FLEX 200 firmware"
        },
        "product_version": "4.50 through 5.30"
      },
      {
        "id": "8feaa902-97f3-3a39-8901-85b4c02fa864",
        "product": {
          "name": "USG/Zywall series Firmware"
        },
        "product_version": "4.11 through 4.72"
      },
      {
        "id": "9503cf77-f921-3c7c-9a19-538505c69edb",
        "product": {
          "name": "ATP series firmware"
        },
        "product_version": "4.32 through 5.30"
      },
      {
        "id": "ca29e43c-356c-3f78-9ff4-f31c821fe174",
        "product": {
          "name": "USG FLEX 700 firmware"
        },
        "product_version": "4.50 through 5.30"
      },
      {
        "id": "f23073cc-ebf9-36ff-8b91-268430277d01",
        "product": {
          "name": "USG FLEX 50(W) firmware"
        },
        "product_version": "4.16 through 5.30"
      },
      {
        "id": "f3d75726-9e88-39e1-b456-9afc358ef950",
        "product": {
          "name": "USG FLEX 100(W) firmware"
        },
        "product_version": "4.50 through 5.30"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/support/Zyxel-security-advisory-authenticated-directory-traversal-vulnerabilities-of-firewalls.shtml

03 Oct 2025 20:07Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5

EPSS0.01028