Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Zyxel USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware — zyxel.com/global/en/support/security-advisories/zyxel-secur… Clear all filters
TI-2023-05873 CVE-2023-6399 · GHSA-6mfv-h538-gwvr

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through…

Priority LOW 30

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00649 Published 2024-02-20 No fix listed CWE-134
TI-2023-05872 CVE-2023-6398 · GHSA-p6jh-65c7-8r26

OS command injection in Zyxel ATP series firmware

Priority LOW 36

A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01333 Published 2024-02-20 Fixed in 6.29(ABYW.4), 6.70(ABVS.1) +2 CWE-78