Known vulnerabilities in USG FLEX 200

Vendor: ZyXEL Communications Corp.
Software: USG FLEX 200
Software CPE: cpe:2.3:h:zyxel_communications_corp:usg_flex_200:*:*:*:*:*:*:*:*
Website: https://www.zyxel.com/
Total vulnerabilities: 3
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting USG FLEX 200 USG FLEX 200 is affected by 3 known vulnerabilities: 1 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65413 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-2030		 CWE-22 Medium
No
No
 5.31 19.07.2022 SB2022071902
#VU65410 - Permissions, Privileges, and Access Controls
CVE-2022-30526		 CWE-264 Low
Available
No
 5.31 19.07.2022 SB2022071902
#VU63145 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-30525		 CWE-78 High
Available
Exploited
 5.30 13.05.2022 SB2022051308