Home/Product/zyxel zywall 310 firmware
Product

zyxel zywall 310 firmware

10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2022-38547
>= 4.20 and <= 4.72
A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 through
7.2HIGH
 CVE-2022-30526
>= 4.30 and <= 5.30
A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.3
7.8HIGH
 CVE-2022-2030
>= 4.30 and <= 5.30
A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in so
6.5MEDIUM
 CVE-2022-0342
>= 4.20 and < 4.71
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX
9.8CRITICAL
 CVE-2021-35029
>= 4.35 and <= 5.01
An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 th
9.8CRITICAL
 CVE-2020-29583
all versions
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password fo
9.8CRITICAL
 CVE-2020-9054
>= 4.35 and < 4.35\(aaab.3\)c0
Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection
9.8CRITICAL
 CVE-2019-12583
<= 4.33\(aaab.0\)c0
Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to gene
9.1CRITICAL
 CVE-2019-9955
all versions
On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, US
6.1MEDIUM
 CVE-2018-9129
all versions
ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation
5.9MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin