Usg Flex 100ax Firmware vulnerabilities

2 known vulnerabilities in Usg Flex 100ax Firmware from Zyxel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  ATP series firmware: Use of Externally-Controlled Format String

  CVE-2023-6764Feb 20, 2024Zyxel

  A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 throu

• 7.2 High severity

  ATP series firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-6398Feb 20, 2024ZyxelEPSS 1.33%

  A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from