high7.2
CVE-2020-29299
Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action.
Impact
Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator before SD-OS V10.03 week32, USG before ZLD V4.39 week38, USG FLEX before ZLD V4.55 week38, ATP before ZLD V4.55 week38, and NSG before 1.33 patch 4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Vpn Orchestrator | before 10.03 |
| Zyxel | Zld | before 4.39 before 4.55 |
| Zyxel | Nsg Firmware | before 1.33 Version 1.33 |
| Zyxel | Usg Flex Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.zyxel.com/support/Zyxel-security-advisory-for-command-injection-vulnerability-of-firewalls.shtml
- https://www.zyxel.com/us/en/support/security_advisories.shtml
- https://www.zyxel.com/support/Zyxel-security-advisory-for-command-injection-vulnerability-of-firewalls.shtml
- https://www.zyxel.com/us/en/support/security_advisories.shtml