Product by Zyxel
Zld
21 known vulnerabilities in Zld (Zyxel), 1 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-11667 | Zyxel Multiple Firewalls Path Traversal Vulnerability In CISA KEVRansomwarealso in 4 other products | 7.5 | |
| High | CVE-2025-9133 | Zyxel ATP series firmware: Missing Authorization | 8.1 | |
| Critical | CVE-2020-25014 | Zyxel Access Points Firmware: Stack-Based Buffer Overflow | 9.8 | |
| High | CVE-2020-29299 | Zyxel Zld: Command Injection | 7.2 | |
| High | CVE-2025-8078 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2024-42057 | Zyxel ATP series firmware: OS Command Injection | 8.1 | |
| High | CVE-2024-42060 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2024-42059 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2024-7203 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2023-4398 | Zyxel ATP series firmware: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2024-42058 | Zyxel ATP series firmware: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2024-6343 | Zyxel ATP series firmware: Classic Buffer Overflow | 4.9 | |
| Medium | CVE-2023-35139 | Zyxel ATP series firmware: Cross-site Scripting | 5.2 | |
| Medium | CVE-2024-42061 | Zyxel ATP series firmware: Cross-site Scripting | 6.1 | |
| Medium | CVE-2023-35136 | Zyxel ATP series firmware: Improper Input Validation | 5.5 | |
| Medium | CVE-2023-37926 | Zyxel ATP series firmware: Classic Buffer Overflow | 5.5 | |
| Medium | CVE-2023-5960 | Zyxel USG FLEX series firmware: Improper Privilege Management | 5.5 | |
| Medium | CVE-2023-37925 | Zyxel ATP series firmware: Improper Privilege Management | 5.5 | |
| Medium | CVE-2023-5650 | Zyxel ATP series firmware: Improper Privilege Management | 5.5 | |
| Medium | CVE-2023-5797 | Zyxel ATP series firmware: Improper Privilege Management | 5.5 | |
| Medium | CVE-2023-4397 | Zyxel ATP series firmware: Classic Buffer Overflow | 4.4 |