UF
Product
Usg310 Firmware
On CISA KEVExploited in the wild
10
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 4Low 0
Watch
Add Usg310 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-29583 In wildKEV | 9.8 | Dec 22 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability Affected: 4.60 |
| CVE-2020-9054 In wildKEV | 9.8 | Mar 4 | ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi Affected: 4.35 before 4.35\(aapj.3\)c0 |
| CVE-2021-35029 | 9.8 | Jul 2 | An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series… Affected: 4.35 through 4.64 |
| CVE-2019-12583 | 9.1 | Jun 27 | Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the… Affected: through 4.33\(aapj.0\)c0 |
| CVE-2022-26532 | 7.8 | May 24 | A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through… Affected: 4.09 through 4.71 |
| CVE-2022-26531 | 7.8 | May 24 | Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions… Affected: 4.09 through 4.71 |
| CVE-2022-0910 | 6.5 | May 24 | A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX… Affected: 4.32 through 4.71 |
| CVE-2022-0734 | 6.1 | May 24 | A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FLEX series firmware versions 4.50… Affected: 4.35 through 4.70 |
| CVE-2019-12581 | 6.1 | Jun 27 | A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject… Affected: through 4.30 |
| CVE-2019-9955 | 6.1 | Apr 22 | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100… Affected: 4.31 |
Showing 10