Zyxel
13 CVEs in CISA KEV — 2 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2022-30525 |
Multiple Firewalls | — | 0.9994 | 2022-05-16 | 2022-06-06 | A command injection vulnerability in the CGI program of some Zyxel firewall vers | |
CVE-2023-28771 |
Multiple Firewalls | — | 0.9928 | 2023-05-31 | 2023-06-21 | Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error mess | |
CVE-2023-27992 |
Multiple Network-Attached Storage (NAS) Devices | — | 0.8226 | 2023-06-23 | 2023-07-14 | Multiple Zyxel network-attached storage (NAS) devices contain a pre-authenticati | |
CVE-2023-33010 |
Multiple Firewalls | — | 0.2902 | 2023-06-05 | 2023-06-26 | Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls | |
CVE-2023-33009 |
Multiple Firewalls | — | 0.2814 | 2023-06-05 | 2023-06-26 | Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls | |
CVE-2024-40891 |
DSL CPE Devices | — | 0.2289 | 2025-02-11 | 2025-03-04 | Multiple Zyxel DSL CPE devices contain a post-authentication command injection v | |
CVE-2024-40890 |
DSL CPE Devices | — | 0.2070 | 2025-02-11 | 2025-03-04 | Multiple Zyxel DSL CPE devices contain a post-authentication command injection v | |
CVE-2024-11667 |
Multiple Firewalls | — | 0.0293 | 2024-12-03 | 2024-12-24 | RW | Multiple Zyxel firewalls contain a path traversal vulnerability in the web manag |
CVE-2026-7273 |
GS1900 Series Switches | 8.8 | 0.0278 | 2026-09-21 | 2026-09-24 | Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability | |
CVE-2017-6884 |
EMG2926 Routers | — | — | 2023-09-18 | 2023-10-09 | RW | Zyxel EMG2926 routers contain a command injection vulnerability located in the d |
CVE-2017-18368 |
P660HN-T1A Routers | — | — | 2023-08-07 | 2023-08-28 | Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote | |
CVE-2020-9054 |
Multiple Network-Attached Storage (NAS) Devices | — | — | 2022-03-25 | 2022-04-15 | Multiple Zyxel network-attached storage (NAS) devices contain a pre-authenticati | |
CVE-2020-29583 |
Multiple Products | — | — | 2021-11-03 | 2022-05-03 | Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain |