CVE-2022-30525: Zyxel Multiple Firewalls OS Command Injection Vulnerability
In CISA’s Known Exploited Vulnerabilities catalog: Zyxel Multiple Firewalls OS Command Injection Vulnerability.
Added , federal remediation due . Known ransomware use: Unknown.
Required action: Apply updates per vendor instructions.
Description
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-78
Status incidents that name it
No tracked status incident names this CVE.
Affected vendors and products
Zyxel: ATP series firmwareZyxel: USG 20(W)-VPN firmwareZyxel: USG FLEX 100(W) firmwareZyxel: USG FLEX 200 firmwareZyxel: USG FLEX 500 firmwareZyxel: USG FLEX 50(W) firmwareZyxel: USG FLEX 700 firmwareZyxel: VPN series firmware
References
- CVE record on cve.org (opens in new tab)
- NVD entry (opens in new tab)
- packetstormsecurity.com/files/167176/Zyxel-Remote-Command-Execution.html (opens in new tab)
- packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.htm… (opens in new tab)
- packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html (opens in new tab)
- packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html (opens in new tab)
- www.zyxel.com/support/Zyxel-security-advisory-for-OS-command-injection-vulnerabilit… (opens in new tab)
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)