Known vulnerabilities in USG FLEX series - page 3

Vendor: ZyXEL Communications Corp.
Software: USG FLEX series
Software CPE: cpe:2.3:a:zyxel_communications_corp:usg_flex_series:*:*:*:*:*:*:*:*
Website: https://www.zyxel.com/
Total vulnerabilities: 51
Public exploits: 3
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting USG FLEX series USG FLEX series is affected by 51 known vulnerabilities: 2 critical, 7 high, 16 medium, 26 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75461 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28771		 CWE-78 High
Available
Exploited
 5.36 25.04.2023 SB2023042507
#VU75460 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-27991		 CWE-78 Medium
No
No
 5.36 25.04.2023 SB2023042507
#VU75459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-27990		 CWE-79 Low
No
No
 5.36 25.04.2023 SB2023042507
#VU71972 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-38547		 CWE-78 Medium
No
No
 - 07.02.2023 SB2023020704
#VU69914 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40603		 CWE-79 Low
No
No
 5.32 06.12.2022 SB2022120602
#VU63569 - Improper Access Control
CVE-2022-0910		 CWE-284 High
No
No
 5.30 24.05.2022 SB2022052406
#VU63562 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26532		 CWE-78 Low
No
No
 5.30 24.05.2022 SB2022052406
#VU63561 - Improper input validation
CVE-2022-26531		 CWE-20 Low
Available
No
 5.30 24.05.2022 SB2022052406
#VU63555 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0734		 CWE-79 Low
No
No
 5.30 24.05.2022 SB2022052406
#VU61723 - Improper Authentication
CVE-2022-0342		 CWE-287 High
No
No
 5.21 Patch 1 30.03.2022 SB2022033003
#VU48673 - Memory corruption
 CWE-119 High
No
No
 4.55 week38 26.11.2020 SB2020112612


Showing elements 41 - 60 out of 51