Zyxel Usg110_firmware
6 CVEs affecting Zyxel Usg110_firmware. Latest disclosed: 2021-07-02. Critical: 4, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-35029 | Critical | 9.8 | 2021-07-02 | An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP… |
CVE-2020-29583 | Critical | 9.8 | 2020-12-22 | Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found i… |
CVE-2020-9054 | Critical | 9.8 | 2020-03-04 | Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may all… |
CVE-2019-12583 | Critical | 9.1 | 2019-06-27 | Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by direct… |
CVE-2019-12581 | Medium | 6.1 | 2019-06-27 | A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote atta… |
CVE-2019-9955 | Medium | 6.1 | 2019-04-22 | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL… |