CVE Watch—

CVE-2022-30525

Zyxel Multiple Firewalls OS Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

99.9%

p100

KEV

SIM

16 de mai. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 dias99.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Zyxel / Multiple Firewalls

Vulnerabilidade

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Adicionado ao KEV

16 de mai. de 2022

Corrigir até

6 de jun. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2022-30525

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2024-116677.5 ALT

87.2%

KEV—76Zyxel Multiple Firewalls Path Traversal Vulnerability93d CVE-2023-28771—

99.9%

KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2023-33010—

98.2%

KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—CVE-2023-33009—

98.1%

KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—