Description
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Zyxel USG FLEX 100(W) firmware
5.00 through 5.21 Patch 1affected
Zyxel USG FLEX 200 firmware
5.00 through 5.21 Patch 1affected
Zyxel USG FLEX 500 firmware
5.00 through 5.21 Patch 1affected
Zyxel USG FLEX 700 firmware
5.00 through 5.21 Patch 1affected
Zyxel ATP series firmware
5.10 through 5.21 Patch 1affected
Zyxel VPN series firmware
4.60 through 5.21 Patch 1affected
Zyxel USG FLEX 50(W) firmware
5.10 through 5.21 Patch 1affected
Zyxel USG 20(W)-VPN firmware
5.10 through 5.21 Patch 1affected
References
- https://www.zyxel.com/support/Zyxel-security-advisory-for-OS-command-injection-vulnerability-of-firewalls.shtml ↗
- http://packetstormsecurity.com/files/167176/Zyxel-Remote-Command-Execution.html ↗
- http://packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.html ↗
- http://packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html ↗
- http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-30525 ↗