Zyxel Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined	100
Router Operating System	65
Cloud Software	37
Network Encryption Software	30
Firewall Software	25

Produkt

ZyXEL CloudCNM SecuManager	37
Zyxel USG FLEX	32
Zyxel ATP	30
Zyxel VPN	28
Zyxel USG FLEX 50	13

Przeciwdziałanie

Official Fix	41
Temporary Fix	1
Workaround	22
Unavailable	24
Not Defined	170

Wykorzystywanie

High	14
Functional	3
Proof-of-Concept	30
Unproven	9
Not Defined	202

Wektor dostępu

Not Defined	0
Physical	1
Local	19
Adjacent	37
Network	201

Uwierzytelnianie

Not Defined	0
High	12
Low	73
None	173

Interakcja z użytkownikiem

Not Defined	0
Required	39
None	219

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	10
≤5	41
≤6	45
≤7	48
≤8	63
≤9	29
≤10	22

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	13
≤5	46
≤6	44
≤7	54
≤8	51
≤9	31
≤10	19

VulDB

≤1	0
≤2	0
≤3	7
≤4	26
≤5	40
≤6	51
≤7	37
≤8	59
≤9	16
≤10	22

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	24
≤7	14
≤8	15
≤9	21
≤10	27

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	15
≤7	13
≤8	25
≤9	16
≤10	14

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	3
<2k	17
<5k	140
<10k	82
<25k	16
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	115
<2k	56
<5k	57
<10k	25
<25k	5
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (152): 642R (1), AP Configurator (1), APT (1), ARMOR Z1 (2), ARMOR Z2 (2), ATP (30), ATP500 (1), AX7501-B0 (2), Armor X1 WAP6806 (1), Billion 5200W-T (6), C1000Z (1), CloudCNM SecuManager (37), DX5401-B0 (2), EMG2926 (1), FR1000Z (1), GS1200 (1), GS1510-16 (1), GS1900 (9), GS1900-8 (3), GS1900-8HP (1), GS1900-24 (1), GS1900-24EP (1), GS1920-24v2 (1), LTE3301-M209 (1), LTE3316-M604 (1), LTE4506-M606 (1), Multy X AC3000 (1), NAS (1), NAS326 (12), NAS 326 (5), NAS520 (2), NAS540 (4), NAS542 (10), NBG-418N (3), NBG-418N v2 (7), NBG-6604 (1), NBG2105 (1), NBG6604 (3), NBG6716 (1), NBG6818 (1), NBG7510 (1), NBG7815 (1), NR7101 (5), NSA221 (2), NSA310 (2), NSA320S (2), NSA325 (2), NSA325 V2 (2), NSG (1), NWA-1100-NH (2), NWA50AX (3), NWA110AX (1), NWA1123-NI (1), NWA3560-N (1), O2 DSL Router Classic (1), P-330W router (2), P-335WT router (1), P-660HN-51 (1), P-660HN-T1 V2 (1), P-660HW (6), P-660HW-T1 (3), P-660HW D3 (1), P-660RU-T1 (1), P-663HN-51 (1), P-870H-51 (1), P-1302-T10D v3 (1), P-2602HW-D1A (3), P660 (1), P660HN-T1A (4), P660HN-T v1 (2), P660HN-T v2 (2), P660RT2 (2), P1302-T10 v3 (1), P2000W Wifi Phone (1), P8702N (1), PK5001Z (1), PMG2005-T20B (1), PMG5318-B20A (4), PMG5318-B20A GPON (1), Prestige (3), Prestige 310 (1), Prestige 642R (1), Prestige 642R-I (1), Prestige 660H-61 (1), Prestige 2000w V.1voip Wi-fi Phone (2), Prestige Router (1), Q1000 (1), SBG-3300 (2), SBG3300-N000 (1), SBG3300-NB00 (1), SBG3500-N000 (1), SecuExtender SSL VPN Client (1), UAG (2), USG (13), USG20 (2), USG20-VPN (11), USG40 (1), USG50 (1), USG1900 (1), USG FLEX (32), USG FLEX 20 (1), USG FLEX 50 (14), USG FLEX 100 (3), USG FLEX 200 (3), USG FLEX 500 (3), USG FLEX 700 (3), USG Flex (2), USG ZyWALL (2), UTM (1), VMG1312-B10A (1), VMG1312-B10D (1), VMG1312-B30A (1), VMG1312-B30B (1), VMG3312 B10B (1), VMG3312-B10B (1), VMG3312-B10B DSL-491HNU-B1B (1), VMG3312-T20A (2), VMG4380-B10A (1), VMG5313-B30B (2), VMG8324-B10A (1), VMG8924-B10A (1), VMG8924-B30A (1), VPN (29), VPN2S (2), VPN On-premise (1), VPN Orchestrator (1), VSG1435-B101 DSL CPEs (1), WAC500 (3), WAX300H (3), WBE660S (3), WRE6505 (1), WSQ20 (1), WSQ50 (1), WSQ60 (1), WSR30 (1), Wireless N300 NetUSB (4), XGS2210-52HP (1), XGS2220-30 (1), XMG1930-30 (1), XS1930-10 (1), ZyNOS (12), ZyWALL (8), ZyWALL 2 Plus Internet Security Appliance (1), ZyWALL 10 (1), ZyWALL 100 (1), ZyWALL310 (1), ZyWALL1100 (1), ZyWALL USG (2), ZyWall (2), ZynOS (1), Zywall (3), Zywall 2 (4)

Link to Vendor Website: https://www.zyxel.com/

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2024-02-20	6.5	6.5	Zyxel ATP/USG FLEX RAR File denial of service	Nieznany	Not Defined	Not Defined	0.00044	0.07	CVE-2023-6397
2024-02-20	5.7	5.7	Zyxel ATP/USG FLEX/USG FLEX 50/USG20-VPN IPSec VPN Format String	Network Encryption Software	Not Defined	Not Defined	0.00043	0.02	CVE-2023-6399
2024-02-20	7.2	7.0	Zyxel ATP privilege escalation	Network Encryption Software	Not Defined	Official Fix	0.00052	0.03	CVE-2023-6398
2024-02-20	8.1	8.1	Zyxel ATP/USG FLEX/USG FLEX 50/USG20-VPN IPSec VPN Format String	Network Encryption Software	Not Defined	Not Defined	0.00043	0.04	CVE-2023-6764
2024-01-30	7.2	7.2	Zyxel NAS326/NAS542 URL privilege escalation	Nieznany	Not Defined	Not Defined	0.00050	0.00	CVE-2023-5372
2023-11-30	6.4	6.4	Zyxel NAS326/NAS542 URL weak authentication	Nieznany	Not Defined	Not Defined	0.00093	0.02	CVE-2023-35137
2023-11-30	9.8	9.8	Zyxel NAS326/NAS542 WSGI Server privilege escalation	Nieznany	Not Defined	Not Defined	0.00100	0.03	CVE-2023-4474
2023-11-30	8.8	8.8	Zyxel NAS326/NAS542 WSGI Server privilege escalation	Nieznany	Not Defined	Not Defined	0.00050	0.00	CVE-2023-37928
2023-11-30	8.8	8.8	Zyxel NAS326/NAS542 CGI Program privilege escalation	Nieznany	Not Defined	Not Defined	0.00052	0.00	CVE-2023-37927
2023-11-30	9.8	9.8	Zyxel NAS326/NAS542 HTTP POST Request show_zysync_server_contents privilege escalation	Nieznany	Not Defined	Not Defined	0.00058	0.02	CVE-2023-35138
2023-11-30	9.8	9.8	Zyxel NAS326/NAS542 Web Server privilege escalation	Nieznany	Not Defined	Not Defined	0.00068	0.04	CVE-2023-4473
2023-11-28	5.2	5.2	Zyxel ATP/USG FLEX/USG FLEX 50/USG20-VPN/VPN CGI Program cross site scripting	Network Encryption Software	Not Defined	Not Defined	0.00046	0.02	CVE-2023-35139
2023-11-28	4.4	4.4	Zyxel ATP/USG FLEX/USG FLEX 50/USG20-VPN/VPN Web GUI privilege escalation	Network Encryption Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-5650
2023-11-28	4.4	4.4	Zyxel ATP Debug CLI Command privilege escalation	Network Encryption Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-37925
2023-11-28	4.4	4.4	Zyxel ATP/USG FLEX/USG FLEX 50/USG20-VPN CLI Command memory corruption	Network Encryption Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-4397
2023-11-28	4.4	4.4	Zyxel ATP/USG FLEX/USG FLEX 50/USG20-VPN/VPN Configuration File information disclosure	Network Encryption Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-35136
2023-11-28	5.5	5.5	Zyxel ATP/USG FLEX/USG FLEX 50/USG20-VPN/VPN CLI Command memory corruption	Network Encryption Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-37926
2023-11-28	4.4	4.4	Zyxel USG FLEX/VPN Hotspot privilege escalation	Network Encryption Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-5960
2023-11-28	4.4	4.4	Zyxel ATP Debug CLI Command privilege escalation	Network Encryption Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-5797
2023-11-28	7.5	7.5	Zyxel ATP/USG FLEX/USG FLEX 50/USG20-VPN/VPN IKE Packet memory corruption	Network Encryption Software	Not Defined	Not Defined	0.00052	0.03	CVE-2023-4398
2023-11-20	7.8	7.8	ZyXEL SecuExtender SSL VPN Client CREATE Message memory corruption	Network Encryption Software	Not Defined	Not Defined	0.00042	0.04	CVE-2023-5593
2023-11-18	6.7	6.7	Zyxel GS1900-8HP/GS1900-8 privilege escalation	Nieznany	Not Defined	Not Defined	0.00042	0.00	CVE-2022-45853
2023-11-07	4.4	4.4	Zyxel GS1900-24EP Setting privilege escalation	Nieznany	Not Defined	Not Defined	0.00042	0.00	CVE-2023-35140
2023-09-28	6.3	6.1	ZyXEL PMG2005-T20B login.asp memory corruption	Router Operating System	Proof-of-Concept	Not Defined	0.00052	0.02	CVE-2023-43314
2023-08-14	5.4	5.4	ZyXEL XGS2220-30/XMG1930-30/XS1930-10 Frames denial of service	Nieznany	Not Defined	Not Defined	0.00044	0.00	CVE-2023-28768

233 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 233 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!