Usg310 Firmware vulnerabilities
4 known vulnerabilities in Usg310 Firmware from Zyxel. 4 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
USG/ZyWALL series firmware: Improper Neutralization of Special Elements used in an OS Command
A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmware versio
- 7.8 High severity
Multiple improper input validation flaws were identified in some CLI commands of Zyxel…
Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmwa
- 9.8 Critical severity
Zyxel Multiple Products Use of Hard-Coded Credentials Exploited
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web in
- 9.8 Critical severity
Zyxel Multiple NAS Devices OS Command Injection Exploited
Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS dev