Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Zyxel USG FLEX series firmware, VPN series firmware — zyxel.com/global/en/support/security-advisories/zyxel-secur… Clear all filters
TI-2023-16985 CVE-2023-34141 · GHSA-2hgc-m6qj-p4p4

OS command injection in Zyxel ATP series firmware

Priority LOW 38

A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00684 Published 2023-07-17 No fix listed CWE-78
TI-2023-16984 CVE-2023-34140 · GHSA-65px-649g-rj37

Buffer overflow in Zyxel ATP series firmware

Priority LOW 29

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.16 through 5.36…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.003 Published 2023-07-17 No fix listed CWE-120
TI-2023-16983 CVE-2023-34139 · GHSA-xjxm-x67w-v3c7

OS command injection in Zyxel USG FLEX series firmware

Priority MEDIUM 41

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00759 Published 2023-07-17 No fix listed CWE-78
TI-2023-16982 CVE-2023-34138 · GHSA-886j-wm8v-5q3q

OS command injection in Zyxel ATP series firmware

Priority LOW 38

A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50(W) series…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00684 Published 2023-07-17 No fix listed CWE-78
TI-2023-13277 CVE-2023-28767 · GHSA-6hq2-q59r-h45h

OS command injection in Zyxel ATP series firmware

Priority MEDIUM 40

The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, USG FLEX 50(W) series firmware versions 5…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00404 Published 2023-07-17 No fix listed CWE-78