ZL
Product
Zld
On CISA KEVExploited in the wildRansomware-linked
21
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 10Low 0
Watch
Add Zld to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42061 | 6.1 | Sep 3 | A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series… Affected: 4.32 before 5.39; 4.50 before 5.39; 4.16 before 5.39; 4.16 before 5.39 |
| CVE-2023-35139 | 6.1 | Nov 28 | A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG… Affected: 5.10 through 5.37; 5.00 through 5.37; 5.10 through 5.37; 5.00 through 5.37 |
| CVE-2023-5960 | 5.5 | Nov 28 | An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30… Affected: 4.50 through 5.37; 4.30 through 5.37 |
| CVE-2023-5797 | 5.5 | Nov 28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2023-5650 | 5.5 | Nov 28 | An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2023-37926 | 5.5 | Nov 28 | A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2023-37925 | 5.5 | Nov 28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2023-35136 | 5.5 | Nov 28 | An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: 4.32 through 5.37; 4.50 through 5.37; 4.16 through 5.37; 4.30 through 5.37 |
| CVE-2024-6343 | 4.9 | Sep 3 | A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG… Affected: 4.32 before 5.39; 4.50 before 5.39; 4.16 before 5.39; 4.16 before 5.39 |
| CVE-2023-4397 | 4.4 | Nov 28 | A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN… Affected: 5.37; 5.37; 5.37 |
Showing 10