zyxel Vulnerability Advisory Catalog

Total 308 security vulnerabilities recorded for zyxel software and firmware.

← Back to All Vendors
Component: gs1900-8_firmware

The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3)ย and the GS1900-8HP firmware versionย V2.70(AAHI.3) could ...

๐Ÿ“… 2023-05-30
CVSS 6.7 Dossier →
Component: nas326_firmware

The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an authenticated a...

๐Ÿ“… 2023-05-30
CVSS 7.2 Dossier →
CVE-2023-33010 CRITICAL
Component: atp100_firmware

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmwar...

๐Ÿ“… 2023-05-24
CVSS 9.8 Dossier →
CVE-2023-33009 CRITICAL
Component: atp100_firmware

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware...

๐Ÿ“… 2023-05-24
CVSS 9.8 Dossier →
Component: nbg-418n_firmware

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with ...

๐Ÿ“… 2023-05-01
CVSS 4.9 Dossier →
Component: nbg-418n_firmware

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated atta...

๐Ÿ“… 2023-05-01
CVSS 6.5 Dossier →
Component: nbg-418n_firmware

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to ...

๐Ÿ“… 2023-05-01
CVSS 7.5 Dossier →
Component: nbg-418n_firmware

A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated att...

๐Ÿ“… 2023-05-01
CVSS 7.5 Dossier →
Component: nbg6604_firmware

The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to...

๐Ÿ“… 2023-05-01
CVSS 8.8 Dossier →
Component: dx5401-b0_firmware

The sensitive information exposure vulnerability in the CGI โ€œExport_Logโ€ and the binary โ€œzcmdโ€ in Zyxel DX5401-B0 firmware versions prior to V5.17(ABY...

๐Ÿ“… 2023-04-27
CVSS 7.5 Dossier →
CVE-2023-28769 CRITICAL
Component: dx5401-b0_firmware

The buffer overflow vulnerability in the library โ€œlibclinkc.soโ€ of the web server โ€œzhttpdโ€ in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)...

๐Ÿ“… 2023-04-27
CVSS 9.8 Dossier →
CVE-2023-28771 CRITICAL
Component: atp100_firmware

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FL...

๐Ÿ“… 2023-04-25
CVSS 9.8 Dossier →
Component: atp200_firmware

The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series fi...

๐Ÿ“… 2023-04-24
CVSS 8.8 Dossier →
Component: atp200_firmware

The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5...

๐Ÿ“… 2023-04-24
CVSS 4.8 Dossier →
Component: atp200_firmware

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series f...

๐Ÿ“… 2023-04-24
CVSS 6.5 Dossier →
Component: usg_flex_100_firmware

A buffer overflow vulnerability in the โ€œsdwan_iface_ipcโ€ binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware vers...

๐Ÿ“… 2023-04-24
CVSS 7.5 Dossier →
Component: usg_flex_100_firmware

The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00 through 5.35, USG FLEX 50(W) ...

๐Ÿ“… 2023-04-24
CVSS 8.1 Dossier →
Component: usg_flex_100_firmware

A buffer overflow vulnerability in the โ€œfbwifi_forward.cgiโ€ CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) f...

๐Ÿ“… 2023-04-24
CVSS 7.5 Dossier →
Component: usg_flex_100_firmware

A path traversal vulnerability in the โ€œaccount_print.cgiโ€ CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series fir...

๐Ÿ“… 2023-04-24
CVSS 7.2 Dossier →
Component: usg_flex_100_firmware

A post-authentication command injection vulnerability in the โ€œaccount_operator.cgiโ€ CGI program of Zyxel USG FLEX series firmware versions 4.50 throug...

๐Ÿ“… 2023-04-24
CVSS 8.1 Dossier →
CVE-2023-22920 CRITICAL
Component: lte3202-m437_firmware

A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a factory default misconfiguration ...

๐Ÿ“… 2023-02-21
CVSS 9.8 Dossier →
Component: nwa110ax_firmware

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temp...

๐Ÿ“… 2023-02-07
CVSS 4.3 Dossier →
Component: nbg-418n_firmware

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store ma...

๐Ÿ“… 2023-02-07
CVSS 6.1 Dossier →
Component: atp100_firmware

A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72, VPN series fi...

๐Ÿ“… 2023-02-07
CVSS 7.2 Dossier →
Page 5 of 13 (308 Total Records)