AS
Product
ATP series firmware
On CISA KEVExploited in the wildRansomware-linked
49
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 24Medium 18Low 0
Watch
Add ATP series firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6399 | 6.5 | Feb 20 | A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX… Affected: version 4.32 through 5.37 Patch 1 |
| CVE-2023-34140 | 6.5 | Jul 17 | A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch 2, USG FLEX 50(W)… Affected: 4.32 through 5.36 Patch 2 |
| CVE-2023-22918 | 6.5 | Apr 24 | A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through… Affected: 4.32 through 5.35 |
| CVE-2022-2030 | 6.5 | Jul 19 | A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG FLEX 100(W) firmware… Affected: 4.32 through 5.30 |
| CVE-2022-0910 | 6.5 | May 24 | A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX… Affected: 4.32 through 5.21 |
| CVE-2024-42061 | 6.1 | Sep 3 | A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series… Affected: versions V4.32 through V5.38 |
| CVE-2023-35139 | 6.1 | Nov 28 | A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG… Affected: versions 5.10 through 5.37 |
| CVE-2022-40603 | 6.1 | Dec 6 | A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG… Affected: 4.32 through 5.31 |
| CVE-2022-0734 | 6.1 | May 24 | A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FLEX series firmware versions 4.50… Affected: 4.35 through 5.20 |
| CVE-2023-5797 | 5.5 | Nov 28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: versions 4.32 through 5.37 |
| CVE-2023-5650 | 5.5 | Nov 28 | An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG… Affected: versions 4.32 through 5.37 |
| CVE-2023-37926 | 5.5 | Nov 28 | A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware… Affected: versions 4.32 through 5.37 |
| CVE-2023-37925 | 5.5 | Nov 28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: versions 4.32 through 5.37 |
| CVE-2023-35136 | 5.5 | Nov 28 | An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: versions 4.32 through 5.37 |
| CVE-2023-6397 | 5.3 | Feb 20 | A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1… Affected: version 4.32 through 5.37 Patch 1 |
| CVE-2024-6343 | 4.9 | Sep 3 | A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG… Affected: versions V4.32 through V5.38 |
| CVE-2023-27990 | 4.8 | Apr 24 | The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware… Affected: 4.32 through 5.35 |
| CVE-2023-4397 | 4.4 | Nov 28 | A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN… Affected: 5.37 |
Showing 18