Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Zyxel ATP series firmware, USG FLEX series firmware — zyxel.com/global/en/support/security-advisories/zyxel-secur… Clear all filters
TI-2024-28067 CVE-2024-42061 · GHSA-24gr-q86g-qp3p

Cross-site scripting in Zyxel ATP series firmware

Priority LOW 27

A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00312 Published 2024-09-03 No fix listed CWE-79
TI-2024-28066 CVE-2024-42060 · GHSA-8gxg-chh3-5hhx

OS command injection in Zyxel ATP series firmware

Priority LOW 36

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions fr…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01339 Published 2024-09-03 No fix listed CWE-78
TI-2024-28065 CVE-2024-42059 · GHSA-xmwj-7m96-j7hw

OS command injection in Zyxel ATP series firmware

Priority LOW 36

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50(W) series firmware versions fr…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01339 Published 2024-09-03 No fix listed CWE-78
TI-2024-28064 CVE-2024-42058 · GHSA-2cmp-5j27-vpm7

NULL pointer dereference in Zyxel ATP series firmware

Priority MEDIUM 40

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V5.20 thro…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00621 Published 2024-09-03 No fix listed CWE-476
TI-2024-28063 CVE-2024-42057 · GHSA-vf97-4vg7-22rv

OS command injection in Zyxel ATP series firmware

Priority MEDIUM 40

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versio…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0132 Published 2024-09-03 No fix listed CWE-78
TI-2024-06670 CVE-2024-7203 · GHSA-pvch-9x5f-vxhr

OS command injection in Zyxel ATP series firmware

Priority LOW 36

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker wi…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01339 Published 2024-09-03 No fix listed CWE-78
TI-2024-05886 CVE-2024-6343 · GHSA-49fx-5cmv-3mw7

Buffer overflow in Zyxel ATP series firmware

Priority LOW 23

A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00605 Published 2024-09-03 No fix listed CWE-120