Zyxel Pmg5617 T20B2 vulnerabilities

6 vulnerabilities

Known vulnerabilities in Zyxel Pmg5617 T20B2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2021-35036zyxelax7501-b0_firmware+31
EPSS score
0.49%
A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.
8CVE-2022-26413zyxelax7501-b0_firmware+32
EPSS score
0.70%
A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.
6CVE-2022-26414zyxelax7501-b0_firmware+32
EPSS score
0.21%
A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.
6.5CVE-2022-43392zyxelax7501-b0_firmware+48
EPSS score
0.62%
A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request.
8.8CVE-2022-43390zyxelax7501-b0_firmware+39
EPSS score
1.08%
A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request.
6.5CVE-2022-43391zyxelax7501-b0_firmware+48
EPSS score
0.72%
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.