137 matches found
CVE-2022-30525_check
CVE-2022-30525check Описание: Данный скрипт проверяет наличие уязвимости внедрения команд ОС CVE-2022-30525 в устройствах Zyxel USG FLEX под управлением версий прошивки с 5.00 по 5.21 Patch 1. Уязвимость позволяет злоумышленнику изменять определённые файлы и выполнять команды ОС на уязвимом...
cve-2022-30525
CVE-2022-30525 от 1vere$k Rapid7 обнаружила и сообщила об уязвимости, затрагивающей межсетевые экраны Zyxel с поддержкой Zero Touch Provisioning ZTP, включая серии ATP, VPN и USG FLEX включая USG20-VPN и USG20W-VPN. Данная уязвимость, идентифицированная как CVE-2022-30525, позволяет...
CVE-2022-30525_Exploit
CVE-2022-30525 Zyxel 방화벽 원격 명령 주입 CVE-2022-30525용 파이썬 기반 익스플로잇 취약점 요약 NIST Zyxel USG FLEX 100W 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 200 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 500 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 700 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 50W 펌웨어 버전 5.10 5.21 Patch 1, USG20W-VPN 펌웨어 버전 5....
CVE-2021-36260
CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check 안전 및 비안전 취약점/검증 점검: '안전 점검'으로 검증되지 않은 경우에만 '비안전 점검'을 사용합니다 $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot 비안전 취약점/검증 점검: $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080...
CVE-2022-30525
CVE-2022-30525 Zyxel 방화벽 원격 명령 주입 CVE-2022-30525용 파이썬 기반 익스플로잇 취약점 요약 NIST Zyxel USG FLEX 100W 펌웨어 버전 5.005.21 Patch 1, USG FLEX 200 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 500 펌웨어 버전 5.005.21 Patch 1, USG FLEX 700 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 50W 펌웨어 버전 5.105.21 Patch 1, USG20W-VPN 펌웨어 버전 5.10...
CVE-2026-14818
CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...
CVE-2026-14818: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...
CVE-2025-11730: Improper Neutralization of Special Elements used in an OS Command
A post‑authentication command injection vulnerability in the Dynamic DNS DDNS configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX series firmware versions from V5.35 through V5.41, USG FLEX 50W series firmware versions from V5.35 through V5.41, and...
CVE-2025-9133
Summary of CVE-2025-9133 (Zyxel devices) Technical details in the connected PT-2025-42828 entry show a missing authorization flaw in Zyxel ATP series, Zyxel USG FLEX series, and Zyxel USG20(W)-VPN devices. The vulnerability arises from insufficient input validation/logic in the CGI interface, spe...
EUVD-2025-35120
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
CVE-2025-9133: Missing Authorization
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16 through V5.40 could...
PT-2025-42828
Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...
VulnCheck KEV: CVE-2022-0342
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...
The vulnerability of the microprogramming software for ZyXEL USG FLEX H devices arises from the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges.
The vulnerability of the microprogrammed network device ZyXEL USG FLEX H is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
EUVD-2021-21676
Malware in sbrugna...
EUVD-2023-27017
Malicious code in bioql PyPI...