Authentication flaw

2021-07-0211:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.3%

JSON

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device.

CPENameOperatorVersion
usg1000_firmwarege4.35
usg1000_firmwarele4.64
usg100_firmwarege4.35
usg100_firmwarele4.64
usg1100_firmwarege4.35
usg1100_firmwarele4.64
usg110_firmwarege4.35
usg110_firmwarele4.64
usg1900_firmwarege4.35
usg1900_firmwarele4.64

Name	Operator	Version
usg1000_firmware	ge	4.35
usg1000_firmware	le	4.64
usg100_firmware	ge	4.35
usg100_firmware	le	4.64
usg1100_firmware	ge	4.35
usg1100_firmware	le	4.64
usg110_firmware	ge	4.35
usg110_firmware	le	4.64
usg1900_firmware	ge	4.35
usg1900_firmware	le	4.64