Read the docs

Zyxel

Records341All Threatist records
Exploited (KEV)13In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV
TI-2026-06387 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-09-21TI-2024-27255 Zyxel DSL CPE OS Command Injection Vulnerability Priority CRITICAL 97KEV 2025-02-11TI-2024-27256 Zyxel DSL CPE OS Command Injection Vulnerability Priority CRITICAL 97KEV 2025-02-11TI-2024-10813 Zyxel Multiple Firewalls Path Traversal Vulnerability Priority CRITICAL 99KEV 2024-12-03TI-2017-04616 Zyxel EMG2926 Routers Command Injection Vulnerability Priority CRITICAL 97KEV 2023-09-18TI-2017-13541 Zyxel P660HN-T1A Routers Command Injection Vulnerability Priority CRITICAL 100KEV 2023-08-07

Components

Products in the NVD configurations · select one to filter the records
Cloudcnm Secumanager 35 records MEDIUM Gs1900-10hp Firmware 35 records CRITICAL Usg Flex 100w Firmware 34 records CRITICAL Usg Flex 200 Firmware 34 records CRITICAL Usg Flex 500 Firmware 34 records CRITICAL Usg Flex 700 Firmware 34 records CRITICAL Usg Flex 100 Firmware 30 records CRITICAL Emg3525-t50b Firmware 28 records MEDIUM

Records

8 records in Nbg-418n Firmware · all components

TI-2015-06055 CVE-2015-7283 · GHSA-hwm3-9jxq-929g

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0…

Priority MEDIUM 42

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 has a default password of 1234 for the admin account, which allows remote attackers to obtain administrative privileges by leveragin…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.03715 Published 2015-12-31 No fix listed CWE-255
TI-2023-09060 CVE-2023-22922 · GHSA-gchg-8x7r-rq44

Buffer overflow in Zyxel NBG-418N v2 firmware

Priority MEDIUM 41

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled o…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00933 Published 2023-05-01 Fixed in V1.00(AARP.14)C0 CWE-120
TI-2023-09059 CVE-2023-22921 · GHSA-8rhh-pq82-8f6m

Cross-site scripting in Zyxel NBG-418N v2 firmware

Priority LOW 33

A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malicious scripts using a…

CVSS 3.1HIGH 7.5 Network High privileges User interaction EPSS 0.00502 Published 2023-05-01 Fixed in V1.00(AARP.14)C0 CWE-79
TI-2023-09061 CVE-2023-22923 · GHSA-fggw-7j3v-3jcw

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions…

Priority LOW 30

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker to cause denial-of-service (DoS) conditions on an affected device…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00788 Published 2023-05-01 Fixed in V1.00(AARP.14)C0 CWE-134
TI-2022-22407 CVE-2022-45441 · GHSA-xcqv-8q74-7h3x

Cross-site scripting in Zyxel NBG-418N v2 firmware

Priority LOW 27

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker to store malicious scripts in the Logs page of the GUI on a vulnerable device.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-02-07 Fixed in V1.00(AARP.13)C0 CWE-79
TI-2023-09062 CVE-2023-22924 · GHSA-h4h8-xpg4-95fv

Buffer overflow in Zyxel NBG-418N v2 firmware

Priority LOW 24

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to cause denial-of-service (DoS) conditions b…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.008 Published 2023-05-01 Fixed in V1.00(AARP.14)C0 CWE-120
Open these records in search →