UF
Product
Usg1900 Firmware
On CISA KEVExploited in the wild
6
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 0Medium 2Low 0
Watch
Add Usg1900 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-29583 In wildKEV | 9.8 | Dec 22 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability Affected: 4.60 |
| CVE-2020-9054 In wildKEV | 9.8 | Mar 4 | ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi Affected: 4.35 before 4.35\(aapl.3\)c0 |
| CVE-2021-35029 | 9.8 | Jul 2 | An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series… Affected: 4.35 through 4.64 |
| CVE-2019-12583 | 9.1 | Jun 27 | Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the… Affected: through 4.33\(aapl.0\)c0 |
| CVE-2019-12581 | 6.1 | Jun 27 | A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject… Affected: through 4.30 |
| CVE-2019-9955 | 6.1 | Apr 22 | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100… Affected: 4.31 |
Showing 6
