Product by Zyxel
Zyxel USG FLEX 700 firmware
34 known vulnerabilities in Zyxel USG FLEX 700 firmware (Zyxel), 5 of them actively exploited (CISA KEV).
Key figures
34
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability In CISA KEValso in 28 other products | 9.8 | |
| Critical | CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability In CISA KEValso in 28 other products | 9.8 | |
| Critical | CVE-2020-29583 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability In CISA KEValso in 26 other products | 9.8 | |
| Critical | CVE-2022-0342 | Zyxel USG/ZyWALL series firmware: Improper Authentication | 9.8 | |
| High | CVE-2023-33012 | Zyxel ATP series firmware: OS Command Injection | 8.8 | |
| High | CVE-2022-26532 | Zyxel USG/ZyWALL series firmware: Argument Injection | 7.8 | |
| Critical | CVE-2021-35029 | Zyxel USG/Zywall series Firmware: Improper Authentication | 9.8 | |
| Medium | CVE-2022-0734 | Zyxel USG/ZyWALL series firmware: Cross-site Scripting | 5.8 | |
| High | CVE-2022-26531 | Zyxel USG/ZyWALL series firmware: Improper Input Validation | 6.1 | |
| High | CVE-2022-38547 | Zyxel ZyWALL/USG series firmware: OS Command Injection | 7.2 | |
| High | CVE-2023-27991 | Zyxel ATP series firmware: OS Command Injection | 8.8 | |
| High | CVE-2023-22913 | Zyxel USG FLEX series firmware: Command Injection | 8.1 | |
| High | CVE-2023-6398 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2022-30526 | Zyxel USG FLEX 100(W) firmware: Improper Privilege Management | 7.8 | |
| Medium | CVE-2022-2030 | Zyxel USG FLEX 100(W) firmware: Path Traversal | 6.5 | |
| High | CVE-2023-22915 | Zyxel USG FLEX series firmware: Classic Buffer Overflow | 7.5 | |
| High | CVE-2023-6764 | Zyxel ATP series firmware: Use of Externally-Controlled Format String | 8.1 | |
| High | CVE-2023-34139 | Zyxel USG FLEX series firmware: OS Command Injection | 8.8 | |
| High | CVE-2023-22914 | Zyxel USG FLEX series firmware: Path Traversal | 7.2 | |
| High | CVE-2023-22917 | Zyxel ATP series firmware: Classic Buffer Overflow | 7.5 | |
| High | CVE-2023-22916 | Zyxel ATP series firmware: Improper Input Validation | 8.1 | |
| High | CVE-2023-34141 | Zyxel ATP series firmware: OS Command Injection | 8.0 | |
| High | CVE-2023-34138 | Zyxel ATP series firmware: OS Command Injection | 8.0 |