ZL
Product
Zld
On CISA KEVExploited in the wildRansomware-linked
21
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 10Low 0
Watch
Add Zld to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-11667 RansomwareIn wildKEV | 9.8 | Nov 27 | Zyxel Multiple Firewalls Path Traversal Vulnerability Affected: 5.00 through 5.38; 5.00 through 5.38; 5.10 through 5.38; 5.10 through 5.38 |
| CVE-2020-25014 | 9.8 | Nov 27 | A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated… Affected: 4.30 through 4.55; 4.30 through 4.55; 4.30 through 4.55; 4.30 through 4.55; 4.30 through 4.55; 4.30 through 4.55; +28 more |
| CVE-2025-9133 | 8.1 | Oct 21 | A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W)… Affected: 4.32 before 5.41; 4.50 before 5.41; 4.16 before 5.41 |
| CVE-2024-42057 | 8.1 | Sep 3 | A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through… Affected: 4.32 before 5.39; 4.50 before 5.39; 4.16 before 5.39; 4.16 before 5.39 |
| CVE-2024-42058 | 7.5 | Sep 3 | A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W)… Affected: 4.32 before 5.39; 4.50 before 5.39; 4.20 before 5.39; 4.20 before 5.39 |
| CVE-2023-4398 | 7.5 | Nov 28 | An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2025-8078 | 7.2 | Oct 21 | A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40,… Affected: 4.32 before 5.41; 4.50 before 5.41; 4.16 before 5.41 |
| CVE-2024-42060 | 7.2 | Sep 3 | A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38,… Affected: 4.32 before 5.39; 4.50 before 5.39; 4.16 before 5.39; 4.16 before 5.39 |
| CVE-2024-42059 | 7.2 | Sep 3 | A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38,… Affected: 5.00 before 5.39; 5.00 before 5.39; 5.00 before 5.39 |
| CVE-2024-7203 | 7.2 | Sep 3 | A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38… Affected: 4.60 before 5.39; 4.60 before 5.39 |
| CVE-2020-29299 | 7.2 | Dec 27 | Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action Affected: before 4.39; before 4.55; before 4.55; before 4.39 |
| CVE-2024-42061 | 6.1 | Sep 3 | A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series… Affected: 4.32 before 5.39; 4.50 before 5.39; 4.16 before 5.39; 4.16 before 5.39 |
| CVE-2023-35139 | 6.1 | Nov 28 | A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG… Affected: 5.10 through 5.37; 5.00 through 5.37; 5.10 through 5.37; 5.00 through 5.37 |
| CVE-2023-5960 | 5.5 | Nov 28 | An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30… Affected: 4.50 through 5.37; 4.30 through 5.37 |
| CVE-2023-5797 | 5.5 | Nov 28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2023-5650 | 5.5 | Nov 28 | An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2023-37926 | 5.5 | Nov 28 | A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2023-37925 | 5.5 | Nov 28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2023-35136 | 5.5 | Nov 28 | An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2024-6343 | 4.9 | Sep 3 | A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG… Affected: 4.32 before 5.39; 4.50 before 5.39; 4.16 before 5.39; 4.16 before 5.39 |
| CVE-2023-4397 | 4.4 | Nov 28 | A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN… Affected: 5.37; 5.37; 5.37 |
Showing 21