Vulnerability index

Browse CVEs

11 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Vmg1312 B10a Firmware HIGH 8.8
CVE-2024-40890 KEVEPSS 22%

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmw…

Mitigation only
Fix from $1,950 2025-02-04
Vmg1312 B10a Firmware HIGH 8.8
CVE-2024-40891 KEVEPSS 22%

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B1…

Mitigation only
Fix from $1,950 2025-02-04
Zld CRITICAL 9.8
CVE-2024-11667 KEV

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmwa…

Fix: after 5.38
Fix from $2,300 2024-11-27
Nas326 Firmware CRITICAL 9.8
CVE-2023-27992 KEVEPSS 84%

The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prio…

Fix: 5.21+
Fix from $2,300 2023-06-19
Atp100 Firmware CRITICAL 9.8
CVE-2023-33009 KEVEPSS 28%

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmwar…

Fix: 5.36+
Fix from $2,300 2023-05-24
Atp100 Firmware CRITICAL 9.8
CVE-2023-33010 KEVEPSS 29%

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmwa…

Fix: 5.36+
Fix from $2,300 2023-05-24
Atp100 Firmware CRITICAL 9.8
CVE-2023-28771 KEVEPSS 99%

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG F…

Fix: 5.35 / 5.36+
Fix from $2,300 2023-04-25
Usg Flex 100w Firmware CRITICAL 9.8
CVE-2022-30525 KEVEPSS 100%

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware v…

Fix: 5.30+
Fix from $2,300 2022-05-12
Usg20 Vpn Firmware CRITICAL 9.8
CVE-2020-29583 KEVEPSS 90%

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can …

Mitigation only
Fix from $2,300 2020-12-22
Nas326 Firmware CRITICAL 9.8
CVE-2020-9054 KEVEPSS 100%

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, whi…

Fix: 4.35 / 5.21+
Fix from $2,300 2020-03-04
Emg2926 Firmware HIGH 8.8
CVE-2017-6884 KEVEPSS 38%

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the …

Mitigation only
Fix from $1,950 2017-04-06