USG 20(W)-VPN firmware vulnerabilities

2 known vulnerabilities in USG 20(W)-VPN firmware from Zyxel. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  USG FLEX 100(W) firmware: Improper Privilege Management

  CVE-2022-30526Jul 19, 2022ZyxelEPSS 1.14%

  A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versi

• 9.8 Critical severity

  Zyxel Multiple Firewalls OS Command Injection Exploited

  CVE-2022-30525May 12, 2022ZyxelEPSS 99.9%

  A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmw