Vulnerability index

Browse CVEs

275 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Zld MEDIUM 5.5
CVE-2023-5797

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series …

Fix: 6.70 / 6.80+
Fix from $1,600 2023-11-28
Zld MEDIUM 5.5
CVE-2023-5960

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series…

Fix: after 5.37
Fix from $1,600 2023-11-28
Zld HIGH 7.5
CVE-2023-4398

An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions …

Fix: after 5.37
Fix from $1,950 2023-11-28
Zld MEDIUM 5.5
CVE-2023-5650

An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware vers…

Fix: after 5.37
Fix from $1,600 2023-11-28
Zld MEDIUM 6.1
CVE-2023-35139

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware v…

Fix: after 5.37
Fix from $1,600 2023-11-28
Zld MEDIUM 5.5
CVE-2023-35136

An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmw…

Fix: after 5.37
Fix from $1,600 2023-11-28
Zld MEDIUM 5.5
CVE-2023-37925

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series …

Fix: 6.70 / 6.80+
Fix from $1,600 2023-11-28
Zld MEDIUM 5.5
CVE-2023-37926

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG…

Fix: after 5.37
Fix from $1,600 2023-11-28
Secuextender Ssl Vpn HIGH 7.8
CVE-2023-5593

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local us…

Patch available
Fix from $1,950 2023-11-20
Gs1900 48hpv2 Firmware MEDIUM 5.5
CVE-2023-35140

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local use…

Fix: after 2.70
Fix from $1,600 2023-11-07
Pmg2005 T20b Firmware HIGH 7.5
CVE-2023-43314

** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0 could allow an unauth…

Mitigation only
Fix from $1,950 2023-09-27
Nbg6604 Firmware HIGH 8.8
CVE-2023-33013

A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticat…

Patch available
Fix from $1,950 2023-08-14
Xgs2220 30 Firmware MEDIUM 6.5
CVE-2023-28768

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware ver…

Patch available
Fix from $1,600 2023-08-14
Usg 2200 Vpn Firmware HIGH 8.8
CVE-2023-33011

A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.3…

Fix: 5.37+
Fix from $1,950 2023-07-17
Usg 20w Vpn Firmware HIGH 8.8
CVE-2023-33012EPSS 10%

A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series fi…

Fix: 5.37+
Fix from $1,950 2023-07-17
Usg 2200 Vpn Firmware HIGH 8.8
CVE-2023-34139

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and …

Fix: 5.37+
Fix from $1,950 2023-07-17
Usg 20w Vpn Firmware HIGH 8.0
CVE-2023-34138

A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX ser…

Fix: 5.37+
Fix from $1,950 2023-07-17
Usg 20w Vpn Firmware HIGH 8.0
CVE-2023-34141

A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, US…

Fix: 5.37+
Fix from $1,950 2023-07-17
Usg 20w Vpn Firmware MEDIUM 6.5
CVE-2023-34140

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5…

Fix: 5.37+
Fix from $1,600 2023-07-17
Usg 2200 Vpn Firmware HIGH 8.8
CVE-2023-28767

The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmwar…

Fix: 5.37+
Fix from $1,950 2023-07-17
Nas326 Firmware CRITICAL 9.8
CVE-2023-27992 KEVEPSS 84%

The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prio…

Fix: 5.21+
Fix from $2,300 2023-06-19
Lte7480 M804 Firmware MEDIUM 6.5
CVE-2023-27989

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated…

Fix: after 1.15
Fix from $1,600 2023-06-05
Gs1900 8 Firmware MEDIUM 6.7
CVE-2022-45853

The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could…

Mitigation only
Fix from $1,600 2023-05-30
Nas326 Firmware HIGH 7.2
CVE-2023-27988

The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an authenticated …

Fix: 5.21+
Fix from $1,950 2023-05-30
Atp100 Firmware CRITICAL 9.8
CVE-2023-33009 KEVEPSS 28%

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmwar…

Fix: 5.36+
Fix from $2,300 2023-05-24
Atp100 Firmware CRITICAL 9.8
CVE-2023-33010 KEVEPSS 29%

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmwa…

Fix: 5.36+
Fix from $2,300 2023-05-24
Nbg6604 Firmware HIGH 8.8
CVE-2023-22919

The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker t…

Patch available
Fix from $1,950 2023-05-01
Nbg 418n Firmware HIGH 7.5
CVE-2023-22921

A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated at…

Fix: after 1.00
Fix from $1,950 2023-05-01
Nbg 418n Firmware HIGH 7.5
CVE-2023-22922

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to…

Fix: after 1.00
Fix from $1,950 2023-05-01
Nbg 418n Firmware MEDIUM 6.5
CVE-2023-22923

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated att…

Fix: after 1.00
Fix from $1,600 2023-05-01