CVE-2022-2591

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-2591

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-2591

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

Code injection

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

TEM FLEX-1085 安全漏洞

The TEM FLEX-1085 is a home WiFi alarm kit from TEM Brazil. A security vulnerability exists in the TEM FLEX-1085 that originates from an unknown function manipulation of the file /sistema/flash/reboot resulting in a denial of service...

PT-2022-17599 · Unknown · Tem Flex-1085

Name of the Vulnerable Software and Affected Versions: TEM FLEX-1085 version 1.6.0 Description: A critical issue has been discovered, affecting an unknown function of the file /sistema/flash/reboot. This issue leads to denial of service and can be exploited remotely. Recommendations: For TEM...

CVE-2022-2591 TEM FLEX-1085 reboot denial of service

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-2591

CVE-2022-2591 is tied to TEM FLEX-1085 version 1.6.0, where an unknown function in the file /sistema/flash/reboot can be manipulated to cause a denial of service. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly (e.g., PacketStorm/Exploit-DB entries). Multi...

Malicious Package

Overview twilio-bugcrowd-poc-twilio-flex-ui-sample is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

The vulnerability of the command-line interface (CLI) of Zyxell USG FLEX, ATP, and VPN network interfaces allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface CLI of Zyxell USG FLEX, ATP, and VPN network interfaces relates to the possibility of rewriting files with arbitrary content. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...

CVE-2022-30526

A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100W firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50W...

CVE-2022-2030

A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG FLEX 100W firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 throu...

Privilege escalation

A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100W firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50W...

Directory traversal

A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG FLEX 100W firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 throu...

CVE-2022-2030

CVE-2022-2030 describes an authenticated directory traversal in Zyxel firewall/USG/ZyWALL CGI programs. Affected products/versions include Zyxel USG FLEX 100(W) (4.50–5.30), USG FLEX 200 (4.50–5.30), USG FLEX 500 (4.50–5.30), USG FLEX 700 (4.50–5.30), USG FLEX 50(W) (4.16–5.30), USG20(W)-VPN (4.1...

CVE-2022-30526

A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100W firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50W...

CVE-2022-30526

CVE-2022-30526 affects Zyxel USG FLEX/USGZyWALL firewalls (e.g., USG FLEX 100(W), 200, 500, 700; USG FLEX 50(W); USG20(W)-VPN; ATP; VPN series; USG/ZyWALL). The issue is a local privilege escalation via the CLI caused by a SUID binary that allows a low-privileged user to copy files as root and ov...

PT-2022-3781 · Zyxel · Zyxel Usg/Zywall Series +8

Name of the Vulnerable Software and Affected Versions: Zyxel USG FLEX 100W versions 4.50 through 5.30 Zyxel USG FLEX 200 versions 4.50 through 5.30 Zyxel USG FLEX 500 versions 4.50 through 5.30 Zyxel USG FLEX 700 versions 4.50 through 5.30 Zyxel USG FLEX 50W versions 4.16 through 5.30 Zyxel...

Zyxel USG FLEX 路径遍历漏洞

Zyxel USG FLEX is a firewall from China-based Hopkins Technology Zyxel. Offering flexible VPN options IPsec, SSL or L2TP, it provides flexible and secure remote access for remote work and management. A security vulnerability exists in Zyxel products that stems from a directory traversal...

The vulnerability of the Common Gateway Interface (CGI) interface of microprogramming software for network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN allows attackers to circumvent security restrictions.

The vulnerability of the Common Gateway Interface CGI interface of ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN network devices is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions by using IPSec VPN...