← CVE Intelligence

CVE-2022-0342

Zyxel / USG/ZyWALL series firmware PUBLISHED

Description (CNA)

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.

Affected (CNA)

Vendor / productVersions
Zyxel / USG/ZyWALL series firmwareaffected 4.20 through 4.70
Zyxel / USG FLEX series firmwareaffected 4.50 through 5.20
Zyxel / ATP series firmwareaffected 4.32 through 5.20
Zyxel / VPN series firmwareaffected 4.30 through 5.20
Zyxel / NSG series firmwareaffected 1.20 through 1.33 Patch 4

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.