Skip to content
Noroxi

Zyxel records

331 published records for vendor Zyxel. 13 of them have been exploited in the wild (listed in CISA KEV) and 20 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
13 · 3.9%
Weaponized
20 · 6%
Pre-auth RCE
42
With a fix record
0.3%
Median publish → KEV
12 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

331 records
  • CVE-2020-9054
    99Now

    ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    zyxel · nas326 firmwareMar 4, 2020

  • CVE-2022-30525
    99Now

    A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 f

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    zyxel · usg flex 100w firmwareMay 12, 2022

  • CVE-2023-28771
    99Now

    Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    zyxel · atp100 firmwareApr 24, 2023

  • CVE-2017-18368
    97Now

    The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in

    CriticalCVSS 9.8KEVWeaponizedEPSS 94%

    zyxel · p660hn-t1a v2 firmwareMay 2, 2019

  • CVE-2020-29583
    96Now

    Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password.

    CriticalCVSS 9.8KEVWeaponizedEPSS 90%

    zyxel · usg20-vpn firmwareDec 22, 2020

  • CVE-2023-27992
    94Now

    The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware vers

    CriticalCVSS 9.8KEVWeaponizedEPSS 82%

    zyxel · nas326 firmwareJun 19, 2023

  • CVE-2023-33010
    78This week

    A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX seri

    CriticalCVSS 9.8KEVWeaponizedEPSS 29%

    zyxel · atp100 firmwareMay 24, 2023

  • CVE-2023-33009
    77This week

    A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX serie

    CriticalCVSS 9.8KEVWeaponizedEPSS 28%

    zyxel · atp100 firmwareMay 24, 2023

  • CVE-2017-6884
    75This week

    A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8.

    HighCVSS 8.8KEVWeaponizedEPSS 32%

    zyxel · emg2926 firmwareApr 6, 2017

  • CVE-2024-40891
    72This week

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel V

    HighCVSS 8.8KEVWeaponizedEPSS 22%

    zyxel · vmg1312-b10a firmwareFeb 4, 2025

  • CVE-2024-40890
    71This week

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B

    HighCVSS 8.8KEVWeaponizedEPSS 20%

    zyxel · vmg1312-b10a firmwareFeb 4, 2025

  • CVE-2024-11667
    70This week

    A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX seri

    CriticalCVSS 9.8KEVWeaponizedEPSS 2%

    zyxel · zldNov 27, 2024

  • CVE-2022-0342
    68This week

    An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series fi

    CriticalCVSS 9.8Proof of conceptEPSS 95%

    zyxel · usg40 firmwareMar 28, 2022

  • CVE-2024-29972
    66This week

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions b

    CriticalCVSS 9.8Proof of conceptEPSS 90%

    zyxel · nas326 firmwareJun 4, 2024

  • CVE-2026-7273
    66This week

    A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a

    HighCVSS 8.8KEVWeaponizedEPSS 2%

    zyxel · gs1900-8 firmwareJun 16, 2026

  • CVE-2024-29973
    65This week

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5

    CriticalCVSS 9.8Proof of conceptEPSS 86%

    zyxel · nas326 firmwareJun 3, 2024

  • CVE-2021-4039
    60This week

    A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS com

    CriticalCVSS 9.8Proof of conceptEPSS 71%

    zyxel · nwa1100-nh firmwareMar 1, 2022

  • CVE-2023-28770
    60This week

    The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to

    HighCVSS 7.5WeaponizedEPSS 57%

    zyxel · dx5401-b0 firmwareApr 27, 2023

  • CVE-2017-18371
    60This week

    The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two

    CriticalCVSS 9.8WeaponizedEPSS 22%

    zyxel · p660hn-t1a v2 firmwareMay 2, 2019

  • CVE-2023-28769
    60This week

    The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.

    CriticalCVSS 9.8WeaponizedEPSS 5%

    zyxel · dx5401-b0 firmwareApr 27, 2023

  • CVE-2023-37928
    53Plan

    A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 fi

    HighCVSS 8.8No exploitEPSS 60%

    zyxel · nas326 firmwareNov 29, 2023

  • CVE-2023-4473
    51Plan

    A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(

    CriticalCVSS 9.8No exploitEPSS 41%

    zyxel · nas326 firmwareNov 29, 2023

  • CVE-2023-35138
    51Plan

    A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NA

    CriticalCVSS 9.8No exploitEPSS 39%

    zyxel · nas326 firmwareNov 29, 2023

  • CVE-2019-12583
    49Plan

    Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest

    CriticalCVSS 9.1Proof of conceptEPSS 43%

    zyxel · uag2100 firmwareJun 27, 2019

  • CVE-2023-4474
    48Plan

    The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware

    CriticalCVSS 9.8No exploitEPSS 29%

    zyxel · nas326 firmwareNov 29, 2023