NSG series firmware vulnerabilities

3 known vulnerabilities in NSG series firmware from Zyxel. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  USG/ZyWALL series firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-26532May 24, 2022ZyxelEPSS 4.79%

  A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmware versio

• 7.8 High severity

  Multiple improper input validation flaws were identified in some CLI commands of Zyxel…

  CVE-2022-26531May 24, 2022ZyxelEPSS 6.37%

  Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmwa

• 9.8 Critical severity

  USG/ZyWALL series firmware: Improper Authentication

  CVE-2022-0342Mar 28, 2022ZyxelEPSS 95.1%

  An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 thr