Usg Flex 100ax Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

UF

Product

Usg Flex 100ax Firmware

by Zyxel · last CVE Sep 3, 2024

9

CVEs

0

On KEV

8.1

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 7Medium 2Low 0

Severity

All severities9 Critical0 High7 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Usg Flex 100ax Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-42057	8.1	1%	Sep 3	A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through… Affected: 4.5 through 5.38
CVE-2023-6764	8.1	1%	Feb 20	A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from… Affected: 4.50 before 5.37; 5.37; 5.37
CVE-2024-42058	7.5	1%	Sep 3	A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W)… Affected: 4.5 through 5.38
CVE-2024-42060	7.2	1%	Sep 3	A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38,… Affected: 4.5 through 5.38
CVE-2024-42059	7.2	1%	Sep 3	A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38,… Affected: 5.00 through 5.38
CVE-2024-7203	7.2	1%	Sep 3	A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38… Affected: 4.60 through 5.38
CVE-2023-6398	7.2	1%	Feb 20	A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware… Affected: 4.50 before 5.37; 5.37; 5.37
CVE-2023-6399	6.5	1%	Feb 20	A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX… Affected: 5.10 before 5.37; 5.37; 5.37
CVE-2023-6397	5.3	0%	Feb 20	A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1… Affected: 4.50 before 5.37; 5.37; 5.37