CVE-2022-0342

🗓️ 28 Mar 2022 13:15:07Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 20 Views

Authentication bypass vulnerability in Zyxel device

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2022-0342	28 Mar 202213:15	–	attackerkb
BDU FSTEC	The vulnerability of the Common Gateway Interface (CGI) interface of microprogramming software for network devices such as ZyXEL USG, USG FLEX, ATP, ZyWALL, VPN, and NSG allows attackers to bypass authentication processes and gain increased privileges.	4 Apr 202200:00	–	bdu_fstec
Circl	CVE-2022-0342	28 Mar 202216:39	–	circl
CNNVD	Zyxel USG/ZyWALL 授权问题漏洞	28 Mar 202200:00	–	cnnvd
CVE	CVE-2022-0342	28 Mar 202212:05	–	cve
Cvelist	CVE-2022-0342	28 Mar 202212:05	–	cvelist
Hive Pro Threat Advisories	Weekly Threat Digest: 28 March – 3 April 2022	5 Apr 202210:11	–	hivepro
Hive Pro Threat Advisories	Authentication Bypass Vulnerability in Zyxel Firmware	2 Apr 202200:44	–	hivepro
Malwarebytes	Update now! Zyxel patches critical firewall bypass vulnerability	4 Apr 202210:22	–	malwarebytes
NCSC	Vulnerability fixed in Zyxel Firewall and VPN systems	1 Apr 202200:00	–	ncsc

NVD

Node

zyxel usg40_firmwareRange4.20–4.71

AND

zyxel usg40Match-

Node

zyxel usg40w_firmwareRange4.20–4.71

AND

zyxel usg40wMatch-

Node

zyxel usg60_firmwareRange4.20–4.71

AND

zyxel usg60Match-

Node

zyxel usg60w_firmwareRange4.20–4.71

AND

zyxel usg60wMatch-

Node

zyxel zywall_110_firmwareRange4.20–4.71

AND

zyxel zywall_110Match-

Node

zyxel zywall_310_firmwareRange4.20–4.71

AND

zyxel zywall_310Match-

Node

zyxel zywall_1100_firmwareRange4.20–4.71

AND

zyxel zywall_1100Match-

Node

zyxel usg_flex_100_firmwareRange4.50–5.20

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_200_firmwareRange4.50–5.20

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_500_firmwareRange4.50–5.20

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_100w_firmwareRange4.50–5.20

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_700_firmwareRange4.50–5.20

AND

zyxel usg_flex_700Match-

Node

zyxel atp100_firmwareRange4.32–5.20

AND

zyxel atp100Match-

Node

zyxel atp100w_firmwareRange4.32–5.20

AND

zyxel atp100wMatch-

Node

zyxel atp200_firmwareRange4.32–5.20

AND

zyxel atp200Match-

Node

zyxel atp500_firmwareRange4.32–5.20

AND

zyxel atp500Match-

Node

zyxel atp700_firmwareRange4.32–5.20

AND

zyxel atp700Match-

Node

zyxel atp800_firmwareRange4.32–5.20

AND

zyxel atp800Match-

Node

zyxel vpn50_firmwareRange4.30–5.21

AND

zyxel vpn50Match-

Node

zyxel vpn100_firmwareRange4.30–5.21

AND

zyxel vpn100Match-

Node

zyxel vpn300_firmwareRange4.30–5.21

AND

zyxel vpn300Match-

Node

zyxel vpn1000_firmwareRange4.30–5.21

AND

zyxel vpn1000Match-

Node

zyxel nsg300_firmwareRange1.20–1.33

OR

zyxel nsg300_firmwareMatch1.33-

OR

zyxel nsg300_firmwareMatch1.33p4

AND

zyxel nsg300Match-

Source	Link
zyxel	www.zyxel.com/support/Zyxel-security-advisory-for-authentication-bypass-vulnerability-of-firewalls.shtml

21 Nov 2024 06:38Current

CVSS 27.5

CVSS 3.19.8

EPSS0.92364

zyxel authentication bypass web authentication administrative access vulnerability cgi program