CVE-2022-30525

CVE-2022-30525 Zyxel CGI程序中的操作系统命令注入漏洞 执行摘要 该漏洞最初于2022年4月13日被发现，导致Zyxel防火墙产品中的远程代码执行。这个CVSS评分为9.8的重要漏洞在出现15天后，Zyxel发布的更新中得到了修复。此过程中至少有20,800台型号受到影响，主要在欧洲。 该漏洞源于零接触配置小程序中的"setWanPortSt"命令。对"setWanPortSt"命令的访问通过/ztp/cgi-bin/handler端点进行。...

Zyxel Firewall SetWanPortSt command injection

Added: 05/20/2022 Background Zyxel Firewalls are a business solution providing protection from malware and unauthorized access. Problem Zyxel USG FLEX, ATP series, and VPN series firewalls are affected by a vulnerability in the SetWanPortSt command which could allow an attacker to inject arbitrar...

CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

Rapid7 discovered and reported a vulnerability that affects Zyxel firewalls supporting Zero Touch Provisioning ZTP, which includes the ATP series, VPN series, and the USG FLEX series including USG20-VPN and USG20W-VPN. The vulnerability, identified as CVE-2022-30525, allows an unauthenticated and...