Known vulnerabilities in ATP series - page 3

Vendor: ZyXEL Communications Corp.

Software: ATP series

Software CPE: cpe:2.3:h:zyxel_communications_corp:atp_series:*:*:*:*:*:*:*:*

Website: https://www.zyxel.com/

Total vulnerabilities: 48

Public exploits: 5

Known exploited (KEV): 6

Highest CVSSv4 Score: 9.3

Vulnerabilities (48)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU65413 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-2030	CWE-22	Medium	No	No	5.31	19.07.2022	SB2022071902
#VU65410 - Permissions, Privileges, and Access Controls CVE-2022-30526	CWE-264	Low	Available	No	5.31	19.07.2022	SB2022071902
#VU63569 - Improper Access Control CVE-2022-0910	CWE-284	High	No	No	5.30	24.05.2022	SB2022052406
#VU63562 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-26532	CWE-78	Low	No	No	5.30	24.05.2022	SB2022052406
#VU63561 - Improper input validation CVE-2022-26531	CWE-20	Low	Available	No	5.30	24.05.2022	SB2022052406
#VU63555 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-0734	CWE-79	Low	No	No	5.30	24.05.2022	SB2022052406
#VU63145 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-30525	CWE-78	High	Available	Exploited	5.30	13.05.2022	SB2022051308
#VU61723 - Improper Authentication CVE-2022-0342	CWE-287	High	No	No	5.21 Patch 1	30.03.2022	SB2022033003

Showing elements 41 - 60 out of 48