EUVD-2021-21674

Malware in sbrugna...

EUVD-2021-21675

Malware in sbrugna...

CVE-2021-35028

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands...

CVE-2021-35027

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...

The vulnerability of Zyxel VPN2S network interface card’s microprogramming software arises from incorrect pathname restrictions for the restricted access directory. This vulnerability allows attackers to gain access to confidential information.

The vulnerability of Zyxel VPN2S network interface card’s microprogramming software exists due to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2021-35028

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands...

CVE-2021-35027

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...

Directory traversal

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...

Command injection

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands...

CVE-2021-35028

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands...

CVE-2021-35027

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...

CVE-2021-35027

CVE-2021-35027 affects Zyxel VPN2S firmware version 1.12, where the web server is vulnerable to a directory traversal flaw allowing remote access to sensitive information. The exposure is evidenced by NVD and Red Hat/other records, with CVSSv3.1 base score 7.5 (HIGH) and CVSSv2 base score 5.0 (ME...

CVE-2021-35028: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands...

CVE-2021-35027: Path Traversal: 'dir/../../filename'

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...