Home/Product/zyxel zywall vpn100 firmware
Product

zyxel zywall vpn100 firmware

10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2023-34141
>= 5.00 and < 5.37
A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 throu
8.0HIGH
CVE-2023-34140
>= 4.30 and < 5.37
A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware vers
6.5MEDIUM
CVE-2023-34139
>= 4.20 and < 5.37
A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 throug
8.8HIGH
CVE-2023-34138
>= 4.60 and < 5.37
A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Pa
8.0HIGH
CVE-2023-33012
>= 5.00 and < 5.37
A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2,
8.8HIGH
CVE-2023-33011
>= 5.00 and < 5.37
A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versio
8.8HIGH
CVE-2023-28767
>= 5.00 and < 5.37
The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG
8.8HIGH
CVE-2021-35029
>= 4.35 and <= 5.01
An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 th
9.8CRITICAL
CVE-2019-12583
<= 10.02\(abfv.0\)c0
Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to gene
9.1CRITICAL
CVE-2018-9129
all versions
ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation
5.9MEDIUM