CVE-2022-30525_check

CVE-2022-30525check Description: Ce script vérifie la présence de la vulnérabilité d'injection de commandes système CVE-2022-30525 sur les appareils Zyxel USG FLEX exécutant les versions de firmware 5.00 à 5.21 Patch 1. La vulnérabilité permet à un attaquant de modifier des fichiers spécifiques e...

cve-2022-30525

CVE-2022-30525 par 1vere$k Rapid7 a découvert et signalé une vulnérabilité affectant les pare-feux Zyxel prenant en charge le Zero Touch Provisioning ZTP, ce qui inclut les séries ATP, VPN et USG FLEX y compris les USG20-VPN et USG20W-VPN. La vulnérabilité, identifiée sous le nom CVE-2022-30525,...

CVE-2022-30525

CVE-2022-30525 Vulnérabilité d'injection de commande à distance non authentifiée sur les pare-feux Zyxel Composants concernés USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Versions du firmware ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10...

CVE-2022-30525_Exploit

CVE-2022-30525 Injection de commandes à distance dans le pare-feu Zyxel Un exploit basé sur Python pour CVE-2022-30525 Résumé de la vulnérabilité NIST Une vulnérabilité d'injection de commandes OS dans le programme CGI des versions de firmware Zyxel USG FLEX 100W 5.00 jusqu'à 5.21 Patch 1 inclus,...

CVE-2022-30525

CVE-2022-30525 Неаутентифицированное удаленное внедрение команд в брандмауэрах Zyxel Затронутые версии Затронутые компоненты USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Версии прошивки ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Vérification de vulnérabilité/validation sécurisée et non sécurisée : n'utilisera la 'vérification non sécurisée' que si la 'vérification sécurisée' ne confirme pas $./CVE-2021-36260.py --rhost...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection Python-эксплойт для CVE-2022-30525 Сводка об уязвимости NIST Уязвимость внедрения OS-команд в CGI-программе Zyxel USG FLEX 100W с версиями прошивки от 5.00 до 5.21 Patch 1 включительно, USG FLEX 200 с версиями прошивки от 5.00 до 5.21 Patch 1...

scan_CVE-2020-29583

Analyseur pour les produits Zyxel vulnérables en raison d'un compte utilisateur non documenté CVE-2020-29583 Détails de la vulnérabilité : https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html Mais je ne suis pas sûr qu'il soit vraiment possible de se connecter avec zyfw...

CVE-2026-14818

CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...

CVE-2026-14818

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...

CVE-2026-14818: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...

PT-2026-67635

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...

CVE-2019-25651: Use of a Broken or Risky Cryptographic Algorithm

Ubiquiti UniFi Network Controller prior to 5.10.12 excluding 5.6.42, UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communication, which contains cryptographic weakness...

CVE-2025-11730

A post‑authentication command injection vulnerability in the Dynamic DNS DDNS configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX series firmware versions from V5.35 through V5.41, USG FLEX 50W series firmware versions from V5.35 through V5.41, and...

CVE-2025-11730: Improper Neutralization of Special Elements used in an OS Command

A post‑authentication command injection vulnerability in the Dynamic DNS DDNS configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX series firmware versions from V5.35 through V5.41, USG FLEX 50W series firmware versions from V5.35 through V5.41, and...

CVE-2025-1732

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable...

CVE-2025-1731

An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting...

CVE-2025-9133

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16 through V5.40 could...

CVE-2025-9133

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16 through V5.40 could...

CVE-2025-9133

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16 through V5.40 could...