USG FLEX 500 firmware vulnerabilities | LiveThreat CVE Feed

Product

USG FLEX 500 firmware

by Zyxel · last CVE Feb 20, 2024

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities34 In the news0 Timeline

Severity mix

Critical 7High 18Medium 9Low 0

Severity

All severities34 Critical7 High18 Medium9 Low0

Exploitation

On CISA KEV5 Exploited in the wild5

Watch

Add USG FLEX 500 firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-33009 In wildKEV	9.8	28%	May 24	Zyxel Multiple Firewalls Buffer Overflow Vulnerability Affected: 4.60 before 5.36; 5.36; 5.36
CVE-2023-33010 In wildKEV	9.8	29%	May 24	Zyxel Multiple Firewalls Buffer Overflow Vulnerability Affected: 4.50 before 5.36; 5.36; 5.36
CVE-2023-28771 In wildKEV	9.8	99%	Apr 25	Zyxel Multiple Firewalls OS Command Injection Vulnerability Affected: 4.60 before 5.36
CVE-2022-30525 In wildKEV	9.8	100%	May 12	Zyxel Multiple Firewalls OS Command Injection Vulnerability Affected: 5.00 through 5.21 Patch 1
CVE-2020-29583 In wildKEV	9.8	90%	Dec 22	Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability Affected: 4.60
CVE-2022-0342	9.8	95%	Mar 28	An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP… Affected: 4.50 through 5.20
CVE-2021-35029	9.8	2%	Jul 2	An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series… Affected: 4.35 through 5.01
CVE-2023-34139	8.8	1%	Jul 17	A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions… Affected: 4.50 before 5.37
CVE-2023-33012	8.8	10%	Jul 17	A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through… Affected: 5.00 before 5.37
CVE-2023-33011	8.8	0%	Jul 17	A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W)… Affected: 5.00 before 5.37
CVE-2023-28767	8.8	0%	Jul 17	The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, … Affected: 5.00 before 5.37
CVE-2023-27991	8.8	1%	Apr 24	The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through… Affected: 4.50 before 5.36
CVE-2023-6764	8.1	1%	Feb 20	A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from… Affected: 4.50 before 5.37; 5.37; 5.37
CVE-2023-22916	8.1	1%	Apr 24	The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00 through 5.35, USG FLEX 50(W) firmware versions 5.10… Affected: 5.00 through 5.35
CVE-2023-22913	8.1	1%	Apr 24	A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series… Affected: 4.50 through 5.35
CVE-2023-34141	8.0	1%	Jul 17	A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware… Affected: 5.00 before 5.37
CVE-2023-34138	8.0	1%	Jul 17	A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60… Affected: 4.60 before 5.37
CVE-2022-30526	7.8	1%	Jul 19	A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through… Affected: 4.50 through 5.30
CVE-2022-26532	7.8	5%	May 24	A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through… Affected: 4.50 through 5.21
CVE-2022-26531	7.8	6%	May 24	Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions… Affected: 4.50 through 5.21
CVE-2023-22917	7.5	1%	Apr 24	A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG… Affected: 5.00 through 5.32
CVE-2023-22915	7.5	1%	Apr 24	A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.30 through… Affected: 4.50 through 5.35
CVE-2023-6398	7.2	1%	Feb 20	A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware… Affected: 4.50 before 5.37; 5.37; 5.37
CVE-2023-22914	7.2	1%	Apr 24	A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through… Affected: 4.50 through 5.35
CVE-2022-38547	7.2	3%	Feb 7	A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72, VPN series firmware versions 4.30 through… Affected: 4.50 through 5.32
CVE-2023-6399	6.5	1%	Feb 20	A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX… Affected: 5.10 before 5.37; 5.37; 5.37
CVE-2023-34140	6.5	0%	Jul 17	A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch 2, USG FLEX 50(W)… Affected: 4.50 before 5.37
CVE-2023-22918	6.5	1%	Apr 24	A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through… Affected: 4.50 before 5.36
CVE-2022-2030	6.5	1%	Jul 19	A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG FLEX 100(W) firmware… Affected: 4.50 through 5.30
CVE-2022-0910	6.5	1%	May 24	A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX… Affected: 4.50 through 5.21
CVE-2022-40603	6.1	0%	Dec 6	A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG… Affected: 4.50 through 5.31
CVE-2022-0734	6.1	9%	May 24	A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FLEX series firmware versions 4.50… Affected: 4.50 through 5.20
CVE-2023-6397	5.3	0%	Feb 20	A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1… Affected: 4.50 before 5.37; 5.37; 5.37
CVE-2023-27990	4.8	0%	Apr 24	The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware… Affected: 4.50 before 5.36