{"schemaVersion":3,"id":"CVE-2022-30525","aliases":[],"status":"published","duplicateOf":null,"title":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","description":"A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.","dates":{"published":"2022-05-12T13:05:11.000Z","modified":"2025-10-21T23:15:39.737Z","reserved":null,"kevAdded":["2022-05-16T00:00:00.000Z"],"kevDue":["2022-06-06T00:00:00.000Z"]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.99944,"percentile":0.99973,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.99944},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.99944,"percentile":0.99973}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.99944,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.99944,"percentile":0.99973}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-05-16T00:00:00.000Z","dueDate":"2022-06-06T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","description":"A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2022-30525","label":"nvd.nist.gov/vuln/detail/CVE-2022-30525"}],"vendor":"Zyxel","product":"Multiple Firewalls","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-05-16T00:00:00.000Z","dueDate":"2022-06-06T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","description":"A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2022-30525","label":"nvd.nist.gov/vuln/detail/CVE-2022-30525"}],"vendor":"Zyxel","product":"Multiple Firewalls","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_29995B3AA1648F2D","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_B8651428838FF0B7","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_E13C48CB18BF86E2","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"50946","name":"Zyxel USG FLEX 5.21 - OS Command Injection","source":"exploit-database","url":"https://www.exploit-db.com/exploits/50946","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":["hardware"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"remote","platform":"hardware","file":"exploits/hardware/remote/50946.txt","codes":["CVE-2022-30525"]},"metasploit":null},{"id":"MSF_EXPLOIT_LINUX_HTTP_ZYXEL_ZTP_RCE","name":"Zyxel Firewall ZTP Unauthenticated Command Injection","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/linux/http/zyxel_ztp_rce.rb","maturity":"weaponized","reliabilityScore":1,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/linux/http/zyxel_ztp_rce","rank":"600","rankName":"excellent","postAuth":false,"check":true,"stability":["crash-safe"],"sideEffects":["artifacts-on-disk","ioc-in-logs"],"reliability":["repeatable-session"]}}],"exploitCount":5,"weaknesses":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/78.html"}],"affected":[{"vendor":"zyxel","product":"atp series firmware","name":"ATP series firmware","label":"atp series firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.10 through 5.21 Patch 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.10 through 5.21 Patch 1","eol":null,"hubHref":"/vendor/zyxel/atp_series_firmware"},{"vendor":"zyxel","product":"atp100_firmware","name":"atp100 firmware","label":"atp100_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.10, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.10, < 5.30","eol":null,"hubHref":"/vendor/zyxel/atp100"},{"vendor":"zyxel","product":"atp100w_firmware","name":"atp100w firmware","label":"atp100w_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.10, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.10, < 5.30","eol":null,"hubHref":"/vendor/zyxel/atp100w"},{"vendor":"zyxel","product":"atp200_firmware","name":"atp200 firmware","label":"atp200_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.10, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.10, < 5.30","eol":null,"hubHref":"/vendor/zyxel/atp200"},{"vendor":"zyxel","product":"atp500_firmware","name":"atp500 firmware","label":"atp500_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.10, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.10, < 5.30","eol":null,"hubHref":"/vendor/zyxel/atp500"},{"vendor":"zyxel","product":"atp700_firmware","name":"atp700 firmware","label":"atp700_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.10, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.10, < 5.30","eol":null,"hubHref":"/vendor/zyxel/atp700"},{"vendor":"zyxel","product":"atp800_firmware","name":"atp800 firmware","label":"atp800_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.10, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.10, < 5.30","eol":null,"hubHref":"/vendor/zyxel/atp800"},{"vendor":"zyxel","product":"usg 20(w)-vpn firmware","name":"USG 20(W)-VPN firmware","label":"usg 20(w)-vpn firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.10 through 5.21 Patch 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.10 through 5.21 Patch 1","eol":null,"hubHref":"/vendor/zyxel/usg_20w-vpn_firmware"},{"vendor":"zyxel","product":"usg_flex_100w_firmware","name":"usg flex 100w firmware","label":"usg_flex_100w_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.00, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.00, < 5.30","eol":null,"hubHref":"/vendor/zyxel/usg_flex_100w"},{"vendor":"zyxel","product":"usg flex 100(w) firmware","name":"USG FLEX 100(W) firmware","label":"usg flex 100(w) firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.00 through 5.21 Patch 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.00 through 5.21 Patch 1","eol":null,"hubHref":"/vendor/zyxel/usg_flex_100w_firmware"},{"vendor":"zyxel","product":"usg_flex_200_firmware","name":"usg flex 200 firmware","label":"usg_flex_200_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.00, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.00, < 5.30","eol":null,"hubHref":"/vendor/zyxel/usg_flex_200"},{"vendor":"zyxel","product":"usg flex 200 firmware","name":"USG FLEX 200 firmware","label":"usg flex 200 firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.00 through 5.21 Patch 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.00 through 5.21 Patch 1","eol":null,"hubHref":"/vendor/zyxel/usg_flex_200_firmware"},{"vendor":"zyxel","product":"usg_flex_500_firmware","name":"usg flex 500 firmware","label":"usg_flex_500_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.00, ≤ 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.00, ≤ 5.30","eol":null,"hubHref":"/vendor/zyxel/usg_flex_500"},{"vendor":"zyxel","product":"usg flex 500 firmware","name":"USG FLEX 500 firmware","label":"usg flex 500 firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.00 through 5.21 Patch 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.00 through 5.21 Patch 1","eol":null,"hubHref":"/vendor/zyxel/usg_flex_500_firmware"},{"vendor":"zyxel","product":"usg_flex_50w_firmware","name":"usg flex 50w firmware","label":"usg_flex_50w_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.10, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.10, < 5.30","eol":null,"hubHref":"/vendor/zyxel/usg_flex_50w"},{"vendor":"zyxel","product":"usg flex 50(w) firmware","name":"USG FLEX 50(W) firmware","label":"usg flex 50(w) firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.10 through 5.21 Patch 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.10 through 5.21 Patch 1","eol":null,"hubHref":"/vendor/zyxel/usg_flex_50w_firmware"},{"vendor":"zyxel","product":"usg_flex_700_firmware","name":"usg flex 700 firmware","label":"usg_flex_700_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.00, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.00, < 5.30","eol":null,"hubHref":"/vendor/zyxel/usg_flex_700"},{"vendor":"zyxel","product":"usg flex 700 firmware","name":"USG FLEX 700 firmware","label":"usg flex 700 firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.00 through 5.21 Patch 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.00 through 5.21 Patch 1","eol":null,"hubHref":"/vendor/zyxel/usg_flex_700_firmware"},{"vendor":"zyxel","product":"usg20w-vpn_firmware","name":"usg20w-vpn firmware","label":"usg20w-vpn_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 5.10, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.10, < 5.30","eol":null,"hubHref":"/vendor/zyxel/usg20w-vpn"},{"vendor":"zyxel","product":"vpn series firmware","name":"VPN series firmware","label":"vpn series firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.60 through 5.21 Patch 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.60 through 5.21 Patch 1","eol":null,"hubHref":"/vendor/zyxel/vpn_series_firmware"},{"vendor":"zyxel","product":"vpn100_firmware","name":"vpn100 firmware","label":"vpn100_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 4.60, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.60, < 5.30","eol":null,"hubHref":"/vendor/zyxel/vpn100"},{"vendor":"zyxel","product":"vpn1000_firmware","name":"vpn1000 firmware","label":"vpn1000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 4.60, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.60, < 5.30","eol":null,"hubHref":"/vendor/zyxel/vpn1000"},{"vendor":"zyxel","product":"vpn300_firmware","name":"vpn300 firmware","label":"vpn300_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 4.60, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.60, < 5.30","eol":null,"hubHref":"/vendor/zyxel/vpn300"},{"vendor":"zyxel","product":"vpn50_firmware","name":"vpn50 firmware","label":"vpn50_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 4.60, < 5.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.60, < 5.30","eol":null,"hubHref":"/vendor/zyxel/vpn50"}],"affectedCount":24,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.zyxel.com/support/Zyxel-security-advisory-for-OS-command-injection-vulnerability-of-firewalls.shtml","label":"www.zyxel.com/support/…","hostname":"www.zyxel.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/167176/Zyxel-Remote-Command-Execution.html","label":"packetstormsecurity.com/files/167176/Zyxel-Remote-Command-Execution.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.html","label":"packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html","label":"packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html","label":"packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-30525","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-30525","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-05-12T13:05:11.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-05-16T00:00:00.000Z","label":"Added to CISA KEV","detail":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-06-06T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:15:39.737Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T23:38:11.743Z","stale":false,"partial":false}}