zyxel Vulnerability Advisory Catalog

Total 308 security vulnerabilities recorded for zyxel software and firmware.

← Back to All Vendors
Component: nebula_lte3301-plus_firmware

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated at...

๐Ÿ“… 2024-09-03
CVSS 7.5 Dossier →
Component: zld

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware version...

๐Ÿ“… 2024-09-03
CVSS 7.2 Dossier →
Component: zld

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware version...

๐Ÿ“… 2024-09-03
CVSS 7.2 Dossier →
Component: zld

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 ...

๐Ÿ“… 2024-09-03
CVSS 7.5 Dossier →
Component: zld

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware ve...

๐Ÿ“… 2024-09-03
CVSS 8.1 Dossier →
Component: nwaw1100-n_firmware

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NWA...

๐Ÿ“… 2024-08-30
CVSS 7.5 Dossier →
CVE-2024-1575 MEDIUM
Component: nwa50ax_firmware

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated u...

๐Ÿ“… 2024-07-23
CVSS 6.5 Dossier →
Component: nas326_firmware

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command โ€œshow_allsessionsโ€ in Zyxel NAS326 firmware versions be...

๐Ÿ“… 2024-06-04
CVSS 6.5 Dossier →
Component: nas326_firmware

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before...

๐Ÿ“… 2024-06-04
CVSS 6.7 Dossier →
CVE-2024-29974 CRITICAL
Component: nas326_firmware

** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program โ€œfile_upload-cgiโ€ in Zyxel NAS326 firmware versions beforeย ...

๐Ÿ“… 2024-06-04
CVSS 9.8 Dossier →
CVE-2024-29973 CRITICAL
Component: nas326_firmware

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the โ€œsetCookieโ€ parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.1...

๐Ÿ“… 2024-06-04
CVSS 9.8 Dossier →
CVE-2024-29972 CRITICAL
Component: nas326_firmware

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.2...

๐Ÿ“… 2024-06-04
CVSS 9.8 Dossier →
CVE-2024-0816 MEDIUM
Component: lte3202-m437_firmware

The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of ser...

๐Ÿ“… 2024-05-21
CVSS 5.5 Dossier →
Component: dx3300-t1_firmware

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker...

๐Ÿ“… 2024-05-21
CVSS 6.5 Dossier →
Component: atp100_firmware

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1,...

๐Ÿ“… 2024-02-20
CVSS 8.1 Dossier →
CVE-2023-6399 MEDIUM
Component: atp100_firmware

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 throug...

๐Ÿ“… 2024-02-20
CVSS 5.7 Dossier →
Component: atp100_firmware

A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, ...

๐Ÿ“… 2024-02-20
CVSS 7.2 Dossier →
CVE-2023-6397 MEDIUM
Component: atp100_firmware

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware...

๐Ÿ“… 2024-02-20
CVSS 6.5 Dossier →
Component: nas326_firmware

The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versions throug...

๐Ÿ“… 2024-01-30
CVSS 7.2 Dossier →
CVE-2023-4474 CRITICAL
Component: nas326_firmware

The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V...

๐Ÿ“… 2023-11-30
CVSS 9.8 Dossier →
CVE-2023-4473 CRITICAL
Component: nas326_firmware

A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0...

๐Ÿ“… 2023-11-30
CVSS 9.8 Dossier →
Component: nas326_firmware

A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware ver...

๐Ÿ“… 2023-11-30
CVSS 8.8 Dossier →
Component: nas326_firmware

The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V...

๐Ÿ“… 2023-11-30
CVSS 8.8 Dossier →
CVE-2023-35138 CRITICAL
Component: nas326_firmware

A command injection vulnerability in the โ€œshow_zysync_server_contentsโ€ function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmw...

๐Ÿ“… 2023-11-30
CVSS 9.8 Dossier →
Page 3 of 13 (308 Total Records)