Known Vulnerabilities for Usg40 by Zyxel
Listed below are 10 of the newest known vulnerabilities associated with "Usg40" by "Zyxel".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
More device details and information can be found at device.report here: Zyxel Usg40
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-40603 json | A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72,... | 6.1 - MEDIUM | 2022-12-06 | 2022-12-08 |
| CVE-2022-38547 json | A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 th... | 7.2 - HIGH | 2023-02-07 | 2023-02-14 |
| CVE-2022-30526 json | A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 throug... | 7.8 - HIGH | 2022-07-19 | 2022-12-13 |
| CVE-2022-2030 json | A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified ... | 6.5 - MEDIUM | 2022-07-19 | 2022-07-29 |
| CVE-2022-0342 json | An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG... | 9.8 - CRITICAL | 2022-03-28 | 2022-04-04 |
| CVE-2021-35029 json | An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.... | 9.8 - CRITICAL | 2021-07-02 | 2021-07-08 |
| CVE-2020-29583 json | Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The passwo... | 9.8 - CRITICAL | 2020-12-22 | 2023-11-07 |
| CVE-2020-25014 json | A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 t... | 9.8 - CRITICAL | 2020-11-27 | 2020-12-10 |
| CVE-2020-9054 json | Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command inje... | 9.8 - CRITICAL | 2020-03-04 | 2020-03-06 |
| CVE-2019-9955 json | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG190... | 6.1 - MEDIUM | 2019-04-22 | 2019-04-30 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Zyxel | Usg40 | - |