Vendor/product archive

zyxel / usg1100 CVEs

Beta · best-effort

5 CVEs tagged to zyxel / usg1100 — 4 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to zyxel vendor archive

CVE-2021-35029

Published Jul 2, 2021

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firm…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2020-29583

Published Dec 22, 2020

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the f…

CVSS 9.8 · Critical

evidence mentions: 7
Buzz score: 52.3

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2020-25014

Published Nov 27, 2020

A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attacker…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2019-12581

Published Jun 27, 2019

A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbi…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-12583

Published Jun 27, 2019

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the acc…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1