Zywall Vpn100 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

ZV

Product

Zywall Vpn100 Firmware

by Zyxel · last CVE Jul 17, 2023

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 2High 6Medium 1Low 0

Severity

All severities9 Critical2 High6 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Zywall Vpn100 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-35029	9.8	2%	Jul 2	An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series… Affected: 4.35 through 5.01
CVE-2019-12583	9.1	44%	Jun 27	Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the… Affected: through 10.02\(abfv.0\)c0
CVE-2023-34139	8.8	1%	Jul 17	A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions… Affected: 4.20 before 5.37
CVE-2023-33012	8.8	10%	Jul 17	A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through… Affected: 5.00 before 5.37
CVE-2023-33011	8.8	0%	Jul 17	A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W)… Affected: 5.00 before 5.37
CVE-2023-28767	8.8	0%	Jul 17	The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, … Affected: 5.00 before 5.37
CVE-2023-34141	8.0	1%	Jul 17	A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware… Affected: 5.00 before 5.37
CVE-2023-34138	8.0	1%	Jul 17	A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60… Affected: 4.60 before 5.37
CVE-2023-34140	6.5	0%	Jul 17	A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch 2, USG FLEX 50(W)… Affected: 4.30 before 5.37