Browse CVEs

MEDIUM 5.5 CVE-2023-5797 An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series … Zld 6.70 / 6.80+ Fix from $1,6002023-11-28 MEDIUM 5.5 CVE-2023-5960 An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series… Zld after 5.37 Fix from $1,6002023-11-28 HIGH 7.5 CVE-2023-4398 An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions … Zld after 5.37 Fix from $1,9502023-11-28 MEDIUM 5.5 CVE-2023-5650 An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware vers… Zld after 5.37 Fix from $1,6002023-11-28 MEDIUM 6.1 CVE-2023-35139 A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware v… Zld after 5.37 Fix from $1,6002023-11-28 MEDIUM 5.5 CVE-2023-35136 An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmw… Zld after 5.37 Fix from $1,6002023-11-28 MEDIUM 5.5 CVE-2023-37925 An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series … Zld 6.70 / 6.80+ Fix from $1,6002023-11-28 MEDIUM 5.5 CVE-2023-37926 A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG… Zld after 5.37 Fix from $1,6002023-11-28 HIGH 7.8 CVE-2023-5593 The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local us… Secuextender Ssl Vpn Patch available Fix from $1,9502023-11-20 MEDIUM 5.5 CVE-2023-35140 The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could allow an authenticated local use… Gs1900 48hpv2 Firmware after 2.70 Fix from $1,6002023-11-07 HIGH 7.5 CVE-2023-43314 ** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0 could allow an unauth… Pmg2005 T20b Firmware Mitigation only Fix from $1,9502023-09-27 HIGH 8.8 CVE-2023-33013 A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticat… Nbg6604 Firmware Patch available Fix from $1,9502023-08-14 MEDIUM 6.5 CVE-2023-28768 Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware ver… Xgs2220 30 Firmware Patch available Fix from $1,6002023-08-14 HIGH 8.8 CVE-2023-33011 A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.3… Usg 2200 Vpn Firmware 5.37+ Fix from $1,9502023-07-17 HIGH 8.8 CVE-2023-33012EPSS 10% A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series fi… Usg 20w Vpn Firmware 5.37+ Fix from $1,9502023-07-17 HIGH 8.8 CVE-2023-34139 A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and … Usg 2200 Vpn Firmware 5.37+ Fix from $1,9502023-07-17 HIGH 8.0 CVE-2023-34138 A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX ser… Usg 20w Vpn Firmware 5.37+ Fix from $1,9502023-07-17 HIGH 8.0 CVE-2023-34141 A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, US… Usg 20w Vpn Firmware 5.37+ Fix from $1,9502023-07-17 MEDIUM 6.5 CVE-2023-34140 A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5… Usg 20w Vpn Firmware 5.37+ Fix from $1,6002023-07-17 HIGH 8.8 CVE-2023-28767 The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmwar… Usg 2200 Vpn Firmware 5.37+ Fix from $1,9502023-07-17 CRITICAL 9.8 CVE-2023-27992 KEVEPSS 84% The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prio… Nas326 Firmware 5.21+ Fix from $2,3002023-06-19 MEDIUM 6.5 CVE-2023-27989 A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated… Lte7480 M804 Firmware after 1.15 Fix from $1,6002023-06-05 MEDIUM 6.7 CVE-2022-45853 The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware version V2.70(AAHI.3) could… Gs1900 8 Firmware Mitigation only Fix from $1,6002023-05-30 HIGH 7.2 CVE-2023-27988 The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an authenticated … Nas326 Firmware 5.21+ Fix from $1,9502023-05-30 CRITICAL 9.8 CVE-2023-33009 KEVEPSS 28% A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmwar… Atp100 Firmware 5.36+ Fix from $2,3002023-05-24 CRITICAL 9.8 CVE-2023-33010 KEVEPSS 29% A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmwa… Atp100 Firmware 5.36+ Fix from $2,3002023-05-24 HIGH 8.8 CVE-2023-22919 The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker t… Nbg6604 Firmware Patch available Fix from $1,9502023-05-01 HIGH 7.5 CVE-2023-22921 A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated at… Nbg 418n Firmware after 1.00 Fix from $1,9502023-05-01 HIGH 7.5 CVE-2023-22922 A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to… Nbg 418n Firmware after 1.00 Fix from $1,9502023-05-01 MEDIUM 6.5 CVE-2023-22923 A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated att… Nbg 418n Firmware after 1.00 Fix from $1,6002023-05-01