CVE-2025-9133
Published Oct 21, 2025A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) se…
Vendor/product archive
zyxel / usg_flex_100ax CVEs
Beta · best-effort14 CVEs tagged to zyxel / usg_flex_100ax — 0 Critical, 10 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2025-8078
Published Oct 21, 2025A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, U…
CVE-2024-11667
Published Nov 27, 2024A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.3…
- evidence mentions
- 4
- Buzz score
- 57.6
CVE-2024-42061
Published Sep 3, 2024A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmwa…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-7203
Published Sep 3, 2024A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2024-6343
Published Sep 3, 2024A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-42060
Published Sep 3, 2024A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, U…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2024-42059
Published Sep 3, 2024A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, U…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2024-42058
Published Sep 3, 2024A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W)…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2024-42057
Published Sep 3, 2024A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.…
- evidence mentions
- 5
- Buzz score
- 25.9
CVE-2023-6764
Published Feb 20, 2024A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2023-6399
Published Feb 20, 2024A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2023-6398
Published Feb 20, 2024A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware vers…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2023-6397
Published Feb 20, 2024A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1…
- evidence mentions
- 2
- Buzz score
- 17.5
Showing 1-14 of 14 CVEsPage 1 of 1