cve-2022-30525

CVE-2022-30525 द्वारा 1vere$k Rapid7 ने एक भेद्यता की खोज की और रिपोर्ट की जो Zyxel फ़ायरवॉल को प्रभावित करती है जो Zero Touch Provisioning ZTP का समर्थन करते हैं, जिसमें ATP श्रृंखला, VPN श्रृंखला, और USG FLEX श्रृंखला USG20-VPN और USG20W-VPN सहित शामिल हैं। यह भेद्यता, जिसे CVE-2022-30525 के रू...

CVE-2022-30525

CVE-2022-30525 Vulnérabilité d'injection de commande à distance non authentifiée sur les pare-feux Zyxel Composants concernés USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Versions du firmware ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Безопасная и небезопасная проверка уязвимости/верификации: будет использоваться 'небезопасная проверка', только если не подтверждена 'безопасной проверкой' $./CVE-2021-36260.py --rhost 192.168.57.20 --rpo...

CVE-2022-30525

CVE-2022-30525 Zyxel फ़ायरवॉल में बिना प्रमाणीकरण के रिमोट कमांड इंजेक्शन प्रभावित संस्करण प्रभावित घटक USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 फर्मवेयर संस्करण ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 अपडेट...

CVE-2022-30525

CVE-2022-30525（Zyxel防火墙远程命令注入） 一个基于Python的CVE-2022-30525漏洞利用工具 漏洞摘要（NIST） Zyxel USG FLEX 100W 固件版本 5.00 至 5.21 Patch 1（含）、USG FLEX 200 固件版本 5.00 至 5.21 Patch 1（含）、USG FLEX 500 固件版本 5.00 至 5.21 Patch 1（含）、USG FLEX 700 固件版本 5.00 至 5.21 Patch 1（含）、USG FLEX 50W 固件版本 5.10 至 5.21 Patch 1（含）、USG20W-VPN...

CVE-2022-30525_check

CVE-2022-30525check Descrizione: Questo script verifica la presenza della vulnerabilità di iniezione dei comandi del sistema operativo CVE-2022-30525 nei dispositivi Zyxel USG FLEX che eseguono versioni del firmware dalla 5.00 alla 5.21 Patch 1. La vulnerabilità consente a un attaccante di...

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel Firewall Remote Command Injection Ein Python-basierter Exploit für CVE-2022-30525 Zusammenfassung der Schwachstelle NIST Eine OS-Befehlseinschleusungsschwachstelle im CGI-Programm von Zyxel USG FLEX 100W Firmware-Versionen 5.00 bis einschließlich 5.21 Patch 1, USG FLEX 200...

CVE-2026-14818

CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...

PT-2026-67635

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...

CVE-2025-11730

A post‑authentication command injection vulnerability in the Dynamic DNS DDNS configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX series firmware versions from V5.35 through V5.41, USG FLEX 50W series firmware versions from V5.35 through V5.41, and...

CVE-2025-1732

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable...

CVE-2025-1731

An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting...

CVE-2025-9133

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16 through V5.40 could...

CVE-2025-9133

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16 through V5.40 could...

CVE-2025-9133

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16 through V5.40 could...

CVE-2025-9133

Summary of CVE-2025-9133 (Zyxel devices) Technical details in the connected PT-2025-42828 entry show a missing authorization flaw in Zyxel ATP series, Zyxel USG FLEX series, and Zyxel USG20(W)-VPN devices. The vulnerability arises from insufficient input validation/logic in the CGI interface, spe...

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

CVE-2025-8078

CVE-2025-8078 describes a post-authentication command-injection vulnerability in Zyxel devices: Zyxel ATP series firmware v4.32–v5.40, USG FLEX series v4.50–v5.40, USG FLEX 50(W) series v4.16–v5.40, and USG20(W)-VPN series v4.16–v5.40. An authenticated administrator can pass a crafted string as a...

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

PT-2025-42828

Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...