Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Advisory: Zyxel VPN series firmware — zyxel.com/global/en/support/security-advisories/zyxel-secur… Clear all filters
TI-2023-05491 CVE-2023-5960 · GHSA-jqv4-rmqv-7747

Improper privilege management in Zyxel USG FLEX series firmware

Priority LOW 24

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2023-11-28 No fix listed CWE-269
TI-2023-05333 CVE-2023-5797 · GHSA-x5q7-jv6g-p5gv

Improper privilege management in Zyxel ATP series firmware

Priority LOW 24

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware ver…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00212 Published 2023-11-28 No fix listed CWE-269
TI-2023-05197 CVE-2023-5650 · GHSA-2fmp-mw85-gxqw

Improper privilege management in Zyxel ATP series firmware

Priority LOW 24

An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 th…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2023-11-28 No fix listed CWE-269
TI-2023-04062 CVE-2023-4398 · GHSA-rfqw-q592-fp2h

Integer overflow in Zyxel ATP series firmware

Priority MEDIUM 41

An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37,…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00881 Published 2023-11-28 No fix listed CWE-190
TI-2023-19359 CVE-2023-37926 · GHSA-fqwh-r468-g35c

Buffer overflow in Zyxel ATP series firmware

Priority LOW 24

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN se…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00221 Published 2023-11-28 No fix listed CWE-120
TI-2023-19358 CVE-2023-37925 · GHSA-w6g6-83gc-85hx

Improper privilege management in Zyxel ATP series firmware

Priority LOW 24

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware ver…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2023-11-28 No fix listed CWE-269
TI-2023-17585 CVE-2023-35139 · GHSA-wjqc-5477-jpgg

Cross-site scripting in Zyxel ATP series firmware

Priority LOW 28

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG FLEX 50(W) series firmware versions 5.10…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00462 Published 2023-11-28 No fix listed CWE-79
TI-2023-17582 CVE-2023-35136 · GHSA-7pcw-5pmh-x8wr

Improper input validation in Zyxel ATP series firmware

Priority LOW 24

An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00243 Published 2023-11-28 No fix listed CWE-20