CVE-2022-0910

A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, and VPN series firmware...

CVE-2022-0734

CVE-2022-0734 describes a cross-site scripting vulnerability in Zyxel USG/ZyWALL CGI programs across multiple firmware lines (USG/ZyWALL 4.35–4.70, USG FLEX 4.50–5.20, ATP 4.35–5.20, VPN 4.35–5.20). The issue allows a malicious script to access information stored in a user’s browser, such as cook...

CVE-2022-26531

CVE-2022-26531 stems from multiple improper input validation flaws in Zyxel devices (USG/ZyWALL, USG FLEX, ATP, VPN, NSG, NXC2500, NAP203, NWA50AX, WAC500, WAX510D) across firmware ranges up to 4.71/5.21/6.x, enabling a local authenticated attacker to trigger a buffer overflow or system crash via...

CVE-2022-0910: Improper Authentication

A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, and VPN series firmware...

CVE-2022-26531: Improper Input Validation

Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmware versions 4.30 through 5.21, NSG...

PT-2022-3363

Name of the Vulnerable Software and Affected Versions ZyXEL USG/ZyWALL series firmware versions 4.32 through 4.71 ZyXEL USG FLEX series firmware versions 4.50 through 5.21 ZyXEL ATP series firmware versions 4.32 through 5.21 ZyXEL VPN series firmware versions 4.32 through 5.21 Description The...

PT-2022-3646

Name of the Vulnerable Software and Affected Versions Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71 Zyxel USG FLEX series firmware versions 4.50 through 5.21 Zyxel ATP series firmware versions 4.32 through 5.21 Zyxel VPN series firmware versions 4.30 through 5.21 Zyxel NSG series...

CVE-2022-26634

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

CVE-2022-26634

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

Code injection

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

CVE-2022-26634

CVE-2022-26634 affects HMA VPN v5.3.5913.0 through an unquoted service path that allows local privilege escalation to SYSTEM. Red Hat and other sources corroborate the same description; no fixed version is specified in the provided documents. Remediation details are not stated in the given materi...

CVE-2022-26634

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

CVE-2022-26634: Unquoted Search Path or Element

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

HMA VPN code-related vulnerabilities

HMA VPN is a VPN software from HMA UK. A security vulnerability exists in HMA VPN version 5.3.5913.0, which stems from the inclusion of an unreferenced service path that allows an attacker to elevate privileges to the system level...

PT-2022-17968 · Hma Vpn · Hma Vpn

Name of the Vulnerable Software and Affected Versions: HMA VPN version 5.3.5913.0 Description: The issue allows attackers to escalate privileges to the system level due to an unquoted service path in HMA VPN. Recommendations: For HMA VPN version 5.3.5913.0, update to a newer version that contains...

Zyxel Firewall SetWanPortSt command injection

Added: 05/20/2022 Background Zyxel Firewalls are a business solution providing protection from malware and unauthorized access. Problem Zyxel USG FLEX, ATP series, and VPN series firewalls are affected by a vulnerability in the SetWanPortSt command which could allow an attacker to inject arbitrar...

SonicWall SSL-VPN SMA100 series operating system command injection vulnerability

SonicWall SSL-VPN SMA100 series is SonicWall's for secure remote connectivity. A series of VPN connectivity solutions. The SonicWall SSL-VPN SMA100 series suffers from an operating system command injection vulnerability that originates from improper input validation in the management interface. A...

Zyxel Firewall ZTP Unauthenticated Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zyxel Firewall ZTP Unauthenticated Command Injection', 'Description' = %q This module exploits CVE-2022-30525, an unauthenticated remote command...

Zyxel Firewall ZTP Unauthenticated Command Injection Exploit

This Metasploit module exploits CVE-2022-30525, an unauthenticated remote command injection vulnerability affecting Zyxel firewalls with zero touch provisioning ZTP support. By sending a malicious setWanPortSt command containing an mtu field with a crafted OS command to the /ztp/cgi-bin/handler...

CVE-2022-22281

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client 32 and 64 bit in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system...