Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-35029

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmw

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zyxel

Description

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zyxel USG/Zywall series Firmware

  • 4.35 through 4.64affected

Zyxel USG FLEX series Firmware

  • 4.35 through 5.01affected

Zyxel ATP series Firmware

  • 4.35 through 5.01affected

Zyxel VPN series Firmware

  • 4.35 through 5.01affected

References