Zyxel

Usg 40w Firmware

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-33009

Warnung
  • EPSS 6.17%
  • Veröffentlicht 24.05.2023 13:15:09
  • Zuletzt bearbeitet 27.10.2025 17:04:58

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG...

9.8

CVE-2023-33010

Warnung
  • EPSS 5.85%
  • Veröffentlicht 24.05.2023 13:15:09
  • Zuletzt bearbeitet 27.10.2025 17:04:54

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, US...

7.8

CVE-2022-26531

  • EPSS 1.56%
  • Veröffentlicht 24.05.2022 06:15:09
  • Zuletzt bearbeitet 21.11.2024 06:54:07

Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN ser...

7.8

CVE-2022-26532

  • EPSS 2.2%
  • Veröffentlicht 24.05.2022 06:15:09
  • Zuletzt bearbeitet 21.11.2024 06:54:07

A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmw...

6.1

CVE-2022-0734

  • EPSS 0.33%
  • Veröffentlicht 24.05.2022 03:15:09
  • Zuletzt bearbeitet 21.11.2024 06:39:17

A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.35 through 5.20, and VPN series...

6.5

CVE-2022-0910

  • EPSS 0.15%
  • Veröffentlicht 24.05.2022 03:15:09
  • Zuletzt bearbeitet 21.11.2024 06:39:39

A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions...

5.9

CVE-2018-9129

  • EPSS 0.27%
  • Veröffentlicht 15.08.2018 18:29:01
  • Zuletzt bearbeitet 21.11.2024 04:15:01

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.