NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2022-30525

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-05-16. Federal due date: 2022-06-06.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Affected products

VendorProductAffected versions
ZyxelUsg Flex 100w Firmware
from 5.00 before 5.30
ZyxelUsg Flex 200 Firmware
from 5.00 before 5.30
ZyxelUsg Flex 500 Firmware
from 5.00 through 5.30
ZyxelUsg Flex 700 Firmware
from 5.00 before 5.30
ZyxelVpn100 Firmware
from 4.60 before 5.30
ZyxelVpn1000 Firmware
from 4.60 before 5.30
ZyxelVpn300 Firmware
from 4.60 before 5.30
ZyxelVpn50 Firmware
from 4.60 before 5.30
ZyxelAtp100 Firmware
from 5.10 before 5.30
ZyxelAtp100w Firmware
from 5.10 before 5.30
ZyxelAtp200 Firmware
from 5.10 before 5.30
ZyxelAtp500 Firmware
from 5.10 before 5.30

Weakness classification

CWE-78

References