zyxel Vulnerability Advisory Catalog

Total 308 security vulnerabilities recorded for zyxel software and firmware.

← Back to All Vendors
Component: nas326_firmware

An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware versio...

๐Ÿ“… 2023-11-30
CVSS 7.5 Dossier →
CVE-2023-5960 MEDIUM
Component: zld

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series ...

๐Ÿ“… 2023-11-28
CVSS 5.5 Dossier →
CVE-2023-5797 MEDIUM
Component: zld

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series f...

๐Ÿ“… 2023-11-28
CVSS 5.5 Dossier →
CVE-2023-5650 MEDIUM
Component: zld

An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versi...

๐Ÿ“… 2023-11-28
CVSS 5.5 Dossier →
Component: zld

An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4...

๐Ÿ“… 2023-11-28
CVSS 7.5 Dossier →
CVE-2023-4397 MEDIUM
Component: zld

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware v...

๐Ÿ“… 2023-11-28
CVSS 4.4 Dossier →
Component: zld

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG ...

๐Ÿ“… 2023-11-28
CVSS 5.5 Dossier →
Component: zld

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series f...

๐Ÿ“… 2023-11-28
CVSS 5.5 Dossier →
Component: zld

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware ve...

๐Ÿ“… 2023-11-28
CVSS 5.2 Dossier →
Component: zld

An improper input validation vulnerability in the โ€œQuaggaโ€ package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmwa...

๐Ÿ“… 2023-11-28
CVSS 5.5 Dossier →
Component: secuextender_ssl_vpn

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local use...

๐Ÿ“… 2023-11-20
CVSS 7.8 Dossier →
Component: gs1900-48hpv2_firmware

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware versionย V2.70(ABTO.5) could allow an authenticated local user...

๐Ÿ“… 2023-11-07
CVSS 5.5 Dossier →
Component: pmg2005-t20b_firmware

** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0ย could allow an unauthe...

๐Ÿ“… 2023-09-27
CVSS 7.5 Dossier →
Component: nbg6604_firmware

A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticate...

๐Ÿ“… 2023-08-14
CVSS 8.8 Dossier →
Component: xgs2220-30_firmware

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware vers...

๐Ÿ“… 2023-08-14
CVSS 6.5 Dossier →
Component: usg_20w-vpn_firmware

A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG...

๐Ÿ“… 2023-07-17
CVSS 8.0 Dossier →
Component: usg_20w-vpn_firmware

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5....

๐Ÿ“… 2023-07-17
CVSS 6.5 Dossier →
Component: usg_2200-vpn_firmware

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and V...

๐Ÿ“… 2023-07-17
CVSS 8.8 Dossier →
Component: usg_20w-vpn_firmware

A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX seri...

๐Ÿ“… 2023-07-17
CVSS 8.0 Dossier →
Component: usg_20w-vpn_firmware

A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series fir...

๐Ÿ“… 2023-07-17
CVSS 8.8 Dossier →
Component: usg_2200-vpn_firmware

A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36...

๐Ÿ“… 2023-07-17
CVSS 8.8 Dossier →
Component: usg_2200-vpn_firmware

The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware...

๐Ÿ“… 2023-07-17
CVSS 8.8 Dossier →
CVE-2023-27992 CRITICAL
Component: nas326_firmware

The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior toย V5.21(AAZF.14)C0, NAS540 firmware versions prior...

๐Ÿ“… 2023-06-19
CVSS 9.8 Dossier →
Component: lte7480-m804_firmware

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated ...

๐Ÿ“… 2023-06-05
CVSS 6.5 Dossier →
Page 4 of 13 (308 Total Records)