Usg 2200-vpn Firmware vulnerabilities

9 known vulnerabilities in Usg 2200-vpn Firmware from Zyxel. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

9vulnerabilities

0critical

9high

0exploited

8.3average CVSS score

Latest first

8.0 High severity
ATP series firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34141Jul 17, 2023Zyxel
A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through
8.8 High severity
USG FLEX series firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34139Jul 17, 2023Zyxel
A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to e
8.0 High severity
ATP series firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-34138Jul 17, 2023Zyxel
A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.60 through 5.36 Patc
8.8 High severity
ATP series firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-33012Jul 17, 2023ZyxelEPSS 9.88%
A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, U
8.8 High severity
ATP series firmware: Use of Externally-Controlled Format String
CVE-2023-33011Jul 17, 2023Zyxel
A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware vers
8.8 High severity
ATP series firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-28767Jul 17, 2023Zyxel
The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, USG FLEX 50(W) series firmware versions 5.10 through 5.36, USG20(W)-VPN series fi
7.8 High severity
USG FLEX 100(W) firmware: Improper Privilege Management
CVE-2022-30526Jul 19, 2022ZyxelEPSS 1.14%
A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versi
7.8 High severity
USG/ZyWALL series firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-26532May 24, 2022ZyxelEPSS 4.79%
A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmware versio
7.8 High severity
Multiple improper input validation flaws were identified in some CLI commands of Zyxel…
CVE-2022-26531May 24, 2022ZyxelEPSS 6.37%
Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmwa