Zyxel vulnerabilities
326 vulnerabilities
Known vulnerabilities in Zyxel products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 571 products.
Products
50 of 571- USG FLEX Series51 vulnerabilities
- ATP Series49 vulnerabilities
- VPN Series37 vulnerabilities
- Cloudcnm Secumanager35 vulnerabilities
- Gs1900 10Hp35 vulnerabilities
- Usg Flex 100W34 vulnerabilities
- Usg Flex 20034 vulnerabilities
- Usg Flex 50034 vulnerabilities
- Usg Flex 70034 vulnerabilities
- Usg Flex 10030 vulnerabilities
- Emg3525 T50B28 vulnerabilities
- Emg5523 T50B28 vulnerabilities
- USG FLEX 50(W) Series28 vulnerabilities
- Usg20(W) VPN Series28 vulnerabilities
- Vmg8623 T50B28 vulnerabilities
- Usg Flex 50W26 vulnerabilities
- Atp20025 vulnerabilities
- Atp50025 vulnerabilities
- Atp80025 vulnerabilities
- Vmg3625 T50B25 vulnerabilities
- Atp10024 vulnerabilities
- Dx3301 T024 vulnerabilities
- Nas32624 vulnerabilities
- Vpn10024 vulnerabilities
- Vpn30024 vulnerabilities
- Vpn5024 vulnerabilities
- Atp100W23 vulnerabilities
- Atp70023 vulnerabilities
- Ex3301 T023 vulnerabilities
- Ex5512 T023 vulnerabilities
- Ex5601 T023 vulnerabilities
- Ex5601 T123 vulnerabilities
- Usg Flex 5023 vulnerabilities
- Vpn100023 vulnerabilities
- Wx5600 T023 vulnerabilities
- Dx5401 B022 vulnerabilities
- Ex3510 B022 vulnerabilities
- Dx5401 B121 vulnerabilities
- Emg5723 T50K21 vulnerabilities
- Ex5510 B021 vulnerabilities
- Vmg3927 T50K21 vulnerabilities
- Vmg8825 T50K21 vulnerabilities
- Zld21 vulnerabilities
- Ax7501 B120 vulnerabilities
- Dx3300 T120 vulnerabilities
- Ex3300 T120 vulnerabilities
- Ex3500 T020 vulnerabilities
- Ex3501 T020 vulnerabilities
- Ex5401 B020 vulnerabilities
- Ex5401 B120 vulnerabilities
CVE-2018-1164zyxelp-870h-51_firmware+1
EPSS score3.96%
This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00(AWG.3)D5. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability is caused by improper access controls that allow access to critical functions without authentication. An attacker can use this vulnerability to reboot affected devices, along with other actions. Was ZDI-CAN-4540.CVE-2018-19326zyxelvmg1312-b10d_firmwareEPSS score9.76%
Zyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd.CVE-2018-9129zyxelusg_110_firmware+16EPSS score0.97%
ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.CVE-2018-9149zyxelac3000_firmwareEPSS score0.46%
The Zyxel Multy X (AC3000 Tri-Band WiFi System) device doesn't use a suitable mechanism to protect the UART. After an attacker dismantles the device and uses a USB-to-UART cable to connect the device, he can use the 1234 password for the root account to login to the system. Furthermore, an attacker can start the device's TELNET service as a backdoor.CVE-2018-14893zyxelnsa325_v2_firmwareEPSS score3.44%
A system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows attackers to execute system commands via the web application API.CVE-2018-14892zyxelnsa325_v2_firmwareEPSS score0.88%
Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms.CVE-2018-18754zyxelvmg3312-b10b_firmwareEPSS score1.08%
ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file.CVE-2018-5330zyxelp-660hw_v3_firmwareEPSS score1.75%
ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (router unreachable/unresponsive) via a flood of fragmented UDP packets.CVE-2018-15602zyxelvmg3312_b10b_firmwareEPSS score0.80%
Zyxel VMG3312 B10B devices are affected by a persistent XSS vulnerability via the pages/connectionStatus/connectionStatus-hostEntry.cmd hostname parameter.CVE-2013-6786allegrosoftrompager+6EPSS score2.17%
Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitrary web script or HTML by requesting a nonexistent URI in conjunction with a crafted HTTP Referer header that is not properly handled in a 404 page. NOTE: there is no CVE for a "URL redirection" issue that some sources list separately.CVE-2013-3588zyxelp-660h-61+10EPSS score2.19%
The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a flood of TCP SYN packets.CVE-2021-4029zyxelarmor z1 (nbg6816) firmware+3EPSS score0.75%
A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary OS commands via a LAN interface.CVE-2021-4030zyxelarmor z1 (nbg6816) firmware+3EPSS score0.44%
A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary commands if they coerce or trick a local user to visit a compromised website with malicious scripts.CVE-2021-4039zyxelnwa1100-nh_firmware+1EPSS score71.05%
A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device.CVE-2021-46387zyxelzywall_2_plus_internet_security_appliance_firmwareEPSS score20.95%
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard hijacking and session hijacking.CVE-2021-3297zyxelnbg2105_firmwareEPSS score20.51%
On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.CVE-2021-35035zyxelnbg6604_firmware+1EPSS score0.65%
A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file.CVE-2021-35031zyxelgs1900 series firmware+16EPSS score0.46%
A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device.CVE-2021-35027zyxelzywall_vpn2s_firmware+1EPSS score2.04%
A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.CVE-2021-35028zyxelzywall_vpn2s_firmware+1EPSS score0.30%
A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands.