Browse CVEs

CRITICAL 9.8 CVE-2024-6342 **UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 … Nas326 Firmware 5.21+ Fix from $2,3002024-09-10 MEDIUM 6.5 CVE-2024-38270 An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation e… Gs1900 48hpv2 Firmware 2.80+ Fix from $1,6002024-09-10 CRITICAL 9.8 CVE-2024-7261EPSS 11% The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and ear… Nwa110ax Firmware 6.28 / 6.70+ Fix from $2,3002024-09-03 MEDIUM 6.1 CVE-2024-42061 A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through… Zld 5.39+ Fix from $1,6002024-09-03 HIGH 7.5 CVE-2024-5412 A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated a… Nebula Lte3301 Plus Firmware 1.10 / 1.18+ Fix from $1,9502024-09-03 HIGH 7.2 CVE-2024-7203 A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware ver… Zld 5.39+ Fix from $1,9502024-09-03 HIGH 8.1 CVE-2024-42057 A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware v… Zld 5.39+ Fix from $1,9502024-09-03 HIGH 7.5 CVE-2024-42058 A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50… Zld 5.39+ Fix from $1,9502024-09-03 HIGH 7.2 CVE-2024-42059 A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versio… Zld 5.39+ Fix from $1,9502024-09-03 HIGH 7.2 CVE-2024-42060 A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versio… Zld 5.39+ Fix from $1,9502024-09-03 CRITICAL 9.8 CVE-2024-8234 ** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NW… Nwaw1100 N Firmware No fix yet Fix from $2,3002024-08-30 MEDIUM 6.5 CVE-2024-1575 The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated … Nwa50ax Firmware 7.00+ Fix from $1,6002024-07-23 MEDIUM 6.5 CVE-2024-29976EPSS 9% ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command “show_allsessions” in Zyxel NAS326 firmware versions b… Nas326 Firmware 5.21+ Fix from $1,6002024-06-04 CRITICAL 9.8 CVE-2024-29973EPSS 86% ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.… Nas326 Firmware 5.21+ Fix from $2,3002024-06-04 CRITICAL 9.8 CVE-2024-29974EPSS 23% ** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versions before… Nas326 Firmware 5.21+ Fix from $2,3002024-06-04 MEDIUM 6.7 CVE-2024-29975 ** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions befor… Nas326 Firmware 5.21+ Fix from $1,6002024-06-04 CRITICAL 9.8 CVE-2024-29972EPSS 89% ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.… Nas326 Firmware 5.21+ Fix from $2,3002024-06-04 MEDIUM 6.5 CVE-2023-37929 The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacke… Dx3300 T1 Firmware Mitigation only Fix from $1,6002024-05-21 MEDIUM 5.5 CVE-2024-0816 The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of se… Lte3202 M437 Firmware Mitigation only Fix from $1,6002024-05-21 HIGH 8.1 CVE-2023-6764 A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX s… Atp100 Firmware 5.37+ Fix from $1,9502024-02-20 HIGH 7.2 CVE-2023-6398 A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1,… Atp100 Firmware 5.37+ Fix from $1,9502024-02-20 MEDIUM 6.5 CVE-2023-6399 A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 throu… Atp100 Firmware 5.37+ Fix from $1,6002024-02-20 MEDIUM 5.3 CVE-2023-6397 A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions f… Atp100 Firmware 5.37+ Fix from $1,6002024-02-20 HIGH 7.2 CVE-2023-5372EPSS 28% The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versions throu… Nas326 Firmware 5.21+ Fix from $1,9502024-01-30 CRITICAL 9.8 CVE-2023-4473EPSS 41% A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C… Nas326 Firmware after 5.21 Fix from $2,3002023-11-30 CRITICAL 9.8 CVE-2023-4474EPSS 30% The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version … Nas326 Firmware after 5.21 Fix from $2,3002023-11-30 HIGH 8.8 CVE-2023-37928EPSS 60% A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware ve… Nas326 Firmware after 5.21 Fix from $1,9502023-11-30 CRITICAL 9.8 CVE-2023-35138EPSS 40% A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firm… Nas326 Firmware after 5.21 Fix from $2,3002023-11-30 HIGH 8.8 CVE-2023-37927 The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version … Nas326 Firmware after 5.21 Fix from $1,9502023-11-30 HIGH 7.5 CVE-2023-35137 An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware versi… Nas326 Firmware after 5.21 Fix from $1,9502023-11-30