Vendor/product archive

zyxel / zywall_vpn300_firmware CVEs

Beta · best-effort

4 CVEs tagged to zyxel / zywall_vpn300_firmware — 1 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to zyxel vendor archive

CVE-2023-34139

Published Jul 17, 2023

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2023-33011

Published Jul 17, 2023

A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) ser…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2023-28767

Published Jul 17, 2023

The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36,…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2019-12583

Published Jun 27, 2019

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the acc…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1