Atp500 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Atp500 Firmware

by Zyxel · last CVE Feb 20, 2024

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 7High 9Medium 9Low 0

Severity

All severities25 Critical7 High9 Medium9 Low0

Exploitation

On CISA KEV6 Exploited in the wild6

Watch

Add Atp500 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-6399	6.5	1%	Feb 20	A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX… Affected: 5.10 before 5.37; 5.37; 5.37
CVE-2023-22918	6.5	1%	Apr 24	A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through… Affected: 4.32 before 5.36
CVE-2022-2030	6.5	1%	Jul 19	A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG FLEX 100(W) firmware… Affected: 4.32 through 5.30
CVE-2022-0910	6.5	1%	May 24	A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX… Affected: 4.32 through 5.21
CVE-2022-40603	6.1	0%	Dec 6	A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG… Affected: 4.32 through 5.31
CVE-2022-0734	6.1	9%	May 24	A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FLEX series firmware versions 4.50… Affected: 4.35 through 5.20
CVE-2019-9955	6.1	21%	Apr 22	On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100… Affected: 4.31
CVE-2023-6397	5.3	0%	Feb 20	A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1… Affected: 4.32 before 5.37; 5.37; 5.37
CVE-2023-27990	4.8	0%	Apr 24	The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware… Affected: 4.32 before 5.36