Vulnerability index

Browse CVEs

275 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nas326 Firmware CRITICAL 9.8
CVE-2024-6342

**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 …

Fix: 5.21+
Fix from $2,300 2024-09-10
Gs1900 48hpv2 Firmware MEDIUM 6.5
CVE-2024-38270

An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation e…

Fix: 2.80+
Fix from $1,600 2024-09-10
Nwa110ax Firmware CRITICAL 9.8
CVE-2024-7261EPSS 11%

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and ear…

Fix: 6.28 / 6.70+
Fix from $2,300 2024-09-03
Zld MEDIUM 6.1
CVE-2024-42061

A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through…

Fix: 5.39+
Fix from $1,600 2024-09-03
Nebula Lte3301 Plus Firmware HIGH 7.5
CVE-2024-5412

A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated a…

Fix: 1.10 / 1.18+
Fix from $1,950 2024-09-03
Zld HIGH 7.2
CVE-2024-7203

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware ver…

Fix: 5.39+
Fix from $1,950 2024-09-03
Zld HIGH 8.1
CVE-2024-42057

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware v…

Fix: 5.39+
Fix from $1,950 2024-09-03
Zld HIGH 7.5
CVE-2024-42058

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50…

Fix: 5.39+
Fix from $1,950 2024-09-03
Zld HIGH 7.2
CVE-2024-42059

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versio…

Fix: 5.39+
Fix from $1,950 2024-09-03
Zld HIGH 7.2
CVE-2024-42060

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versio…

Fix: 5.39+
Fix from $1,950 2024-09-03
Nwaw1100 N Firmware CRITICAL 9.8
CVE-2024-8234

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NW…

No fix yet
Fix from $2,300 2024-08-30
Nwa50ax Firmware MEDIUM 6.5
CVE-2024-1575

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated …

Fix: 7.00+
Fix from $1,600 2024-07-23
Nas326 Firmware MEDIUM 6.5
CVE-2024-29976EPSS 9%

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions b…

Fix: 5.21+
Fix from $1,600 2024-06-04
Nas326 Firmware CRITICAL 9.8
CVE-2024-29973EPSS 86%

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.…

Fix: 5.21+
Fix from $2,300 2024-06-04
Nas326 Firmware CRITICAL 9.8
CVE-2024-29974EPSS 23%

** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before…

Fix: 5.21+
Fix from $2,300 2024-06-04
Nas326 Firmware MEDIUM 6.7
CVE-2024-29975

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions befor…

Fix: 5.21+
Fix from $1,600 2024-06-04
Nas326 Firmware CRITICAL 9.8
CVE-2024-29972EPSS 89%

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.…

Fix: 5.21+
Fix from $2,300 2024-06-04
Dx3300 T1 Firmware MEDIUM 6.5
CVE-2023-37929

The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacke…

Mitigation only
Fix from $1,600 2024-05-21
Lte3202 M437 Firmware MEDIUM 5.5
CVE-2024-0816

The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of se…

Mitigation only
Fix from $1,600 2024-05-21
Atp100 Firmware HIGH 8.1
CVE-2023-6764

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX s…

Fix: 5.37+
Fix from $1,950 2024-02-20
Atp100 Firmware HIGH 7.2
CVE-2023-6398

A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1,…

Fix: 5.37+
Fix from $1,950 2024-02-20
Atp100 Firmware MEDIUM 6.5
CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 throu…

Fix: 5.37+
Fix from $1,600 2024-02-20
Atp100 Firmware MEDIUM 5.3
CVE-2023-6397

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions f…

Fix: 5.37+
Fix from $1,600 2024-02-20
Nas326 Firmware HIGH 7.2
CVE-2023-5372EPSS 28%

The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versions throu…

Fix: 5.21+
Fix from $1,950 2024-01-30
Nas326 Firmware CRITICAL 9.8
CVE-2023-4473EPSS 41%

A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C…

Fix: after 5.21
Fix from $2,300 2023-11-30
Nas326 Firmware CRITICAL 9.8
CVE-2023-4474EPSS 30%

The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version …

Fix: after 5.21
Fix from $2,300 2023-11-30
Nas326 Firmware HIGH 8.8
CVE-2023-37928EPSS 60%

A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware ve…

Fix: after 5.21
Fix from $1,950 2023-11-30
Nas326 Firmware CRITICAL 9.8
CVE-2023-35138EPSS 40%

A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firm…

Fix: after 5.21
Fix from $2,300 2023-11-30
Nas326 Firmware HIGH 8.8
CVE-2023-37927

The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version …

Fix: after 5.21
Fix from $1,950 2023-11-30
Nas326 Firmware HIGH 7.5
CVE-2023-35137

An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware versi…

Fix: after 5.21
Fix from $1,950 2023-11-30