Product by Zyxel
Zyxel Atp800 Firmware
25 known vulnerabilities in Zyxel Atp800 Firmware (Zyxel), 6 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
6
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2020-9054 | Zyxel Multiple NAS Devices OS Command Injection Vulnerability In CISA KEValso in 23 other products | 9.8 | |
| Critical | CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability In CISA KEValso in 28 other products | 9.8 | |
| Critical | CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability In CISA KEValso in 28 other products | 9.8 | |
| Critical | CVE-2020-29583 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability In CISA KEValso in 26 other products | 9.8 | |
| Critical | CVE-2022-0342 | Zyxel USG/ZyWALL series firmware: Improper Authentication | 9.8 | |
| High | CVE-2022-26532 | Zyxel USG/ZyWALL series firmware: Argument Injection | 7.8 | |
| Medium | CVE-2019-9955 | Zyxel Atp200 Firmware: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2022-0734 | Zyxel USG/ZyWALL series firmware: Cross-site Scripting | 5.8 | |
| High | CVE-2022-26531 | Zyxel USG/ZyWALL series firmware: Improper Input Validation | 6.1 | |
| High | CVE-2022-38547 | Zyxel ZyWALL/USG series firmware: OS Command Injection | 7.2 | |
| High | CVE-2023-27991 | Zyxel ATP series firmware: OS Command Injection | 8.8 | |
| High | CVE-2023-6398 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2022-30526 | Zyxel USG FLEX 100(W) firmware: Improper Privilege Management | 7.8 | |
| Medium | CVE-2022-2030 | Zyxel USG FLEX 100(W) firmware: Path Traversal | 6.5 | |
| High | CVE-2023-6764 | Zyxel ATP series firmware: Use of Externally-Controlled Format String | 8.1 | |
| High | CVE-2023-22917 | Zyxel ATP series firmware: Classic Buffer Overflow | 7.5 | |
| High | CVE-2023-22916 | Zyxel ATP series firmware: Improper Input Validation | 8.1 | |
| Medium | CVE-2023-22918 | Zyxel ATP series firmware: Exposure of Private Personal Information to an Unauthorized Actor | 6.5 | |
| Medium | CVE-2022-0910 | Zyxel USG/ZyWALL series firmware: Improper Authentication | 6.5 | |
| Medium | CVE-2023-6399 | Zyxel ATP series firmware: Use of Externally-Controlled Format String | 5.7 | |
| Medium | CVE-2023-6397 | Zyxel ATP series firmware: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2022-40603 | Zyxel ZyWALL/USG series firmware: Cross-site Scripting | 4.7 | |
| Medium | CVE-2023-27990 | Zyxel ATP series firmware: Cross-site Scripting | 4.8 |