CPE Details
Zyxel ZYWALL 310 FIRMWARE 4.20
4.20
2022-04-04
12h07 +00:00
12h07 +00:00
2022-04-19
16h23 +00:00
16h23 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:o:zyxel:zywall_310_firmware:4.20:*:*:*:*:*:*:*
Informations
Vendor
zyxelProduct
zywall_310_firmwareVersion
4.20Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72, VPN series firmware versions 4.30 through 5.32, USG FLEX series firmware versions 4.50 through 5.32, and ATP series firmware versions 4.32 through 5.32, which could allow an authenticated attacker with administrator privileges to execute OS commands. | 7.2 |
High |
||
| An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device. | 9.8 |
Critical |
||
| Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service. | 9.1 |
Critical |
