Product by Zyxel
Usg Flex 50w Firmware
26 known vulnerabilities in Usg Flex 50w Firmware (Zyxel), 4 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
4
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability In CISA KEValso in 28 other products | 9.8 | |
| Critical | CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability In CISA KEValso in 28 other products | 9.8 | |
| High | CVE-2023-33012 | Zyxel ATP series firmware: OS Command Injection | 8.8 | |
| High | CVE-2023-27991 | Zyxel ATP series firmware: OS Command Injection | 8.8 | |
| High | CVE-2023-22913 | Zyxel USG FLEX series firmware: Command Injection | 8.1 | |
| High | CVE-2023-6398 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2022-30526 | Zyxel USG FLEX 100(W) firmware: Improper Privilege Management | 7.8 | |
| Medium | CVE-2022-2030 | Zyxel USG FLEX 100(W) firmware: Path Traversal | 6.5 | |
| High | CVE-2023-22915 | Zyxel USG FLEX series firmware: Classic Buffer Overflow | 7.5 | |
| High | CVE-2023-6764 | Zyxel ATP series firmware: Use of Externally-Controlled Format String | 8.1 | |
| High | CVE-2023-34139 | Zyxel USG FLEX series firmware: OS Command Injection | 8.8 | |
| High | CVE-2023-22914 | Zyxel USG FLEX series firmware: Path Traversal | 7.2 | |
| High | CVE-2023-22917 | Zyxel ATP series firmware: Classic Buffer Overflow | 7.5 | |
| High | CVE-2023-22916 | Zyxel ATP series firmware: Improper Input Validation | 8.1 | |
| High | CVE-2023-34141 | Zyxel ATP series firmware: OS Command Injection | 8.0 | |
| High | CVE-2023-34138 | Zyxel ATP series firmware: OS Command Injection | 8.0 | |
| Medium | CVE-2023-22918 | Zyxel ATP series firmware: Exposure of Private Personal Information to an Unauthorized Actor | 6.5 | |
| High | CVE-2023-28767 | Zyxel ATP series firmware: OS Command Injection | 8.8 | |
| Medium | CVE-2023-6399 | Zyxel ATP series firmware: Use of Externally-Controlled Format String | 5.7 | |
| High | CVE-2023-33011 | Zyxel ATP series firmware: Use of Externally-Controlled Format String | 8.8 | |
| Medium | CVE-2023-6397 | Zyxel ATP series firmware: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2023-34140 | Zyxel ATP series firmware: Classic Buffer Overflow | 6.5 | |
| Medium | CVE-2022-40603 | Zyxel ZyWALL/USG series firmware: Cross-site Scripting | 4.7 |