Lucene search

PRIOn knowledge basePRION:CVE-2022-0342

HistoryMar 28, 2022 - 1:15 p.m.

Authentication flaw

2022-03-2813:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.08 Low

EPSS

Percentile

94.1%

JSON

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.

CPENameOperatorVersion
atp100_firmwarege4.32
atp100_firmwarele5.20
atp100w_firmwarege4.32
atp100w_firmwarele5.20
atp200_firmwarege4.32
atp200_firmwarele5.20
atp500_firmwarege4.32
atp500_firmwarele5.20
atp700_firmwarege4.32
atp700_firmwarele5.20

Name	Operator	Version
atp100_firmware	ge	4.32
atp100_firmware	le	5.20
atp100w_firmware	ge	4.32
atp100w_firmware	le	5.20
atp200_firmware	ge	4.32
atp200_firmware	le	5.20
atp500_firmware	ge	4.32
atp500_firmware	le	5.20
atp700_firmware	ge	4.32
atp700_firmware	le	5.20

Rows per page:

1-10 of 481

References

www.zyxel.com/support/Zyxel-security-advisory-for-authentication-bypass-vulnerability-of-firewalls.shtml

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.08 Low

EPSS

Percentile

94.1%

JSON

Related for PRION:CVE-2022-0342