Known vulnerabilities in VPN series - page 2

Vendor: ZyXEL Communications Corp.
Software: VPN series
Software CPE: cpe:2.3:a:zyxel_communications_corp:vpn_series:*:*:*:*:*:*:*:*
Website: https://www.zyxel.com/
Total vulnerabilities: 37
Public exploits: 5
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VPN series VPN series is affected by 37 known vulnerabilities: 7 high, 15 medium, 15 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75467 - Exposure of sensitive information to an unauthorized actor
CVE-2023-22918		 CWE-200 Medium
No
No
 5.36 25.04.2023 SB2023042508
#VU75466 - Memory corruption
CVE-2023-22917		 CWE-119 Medium
No
No
 5.36 25.04.2023 SB2023042508
#VU75465 - Improper input validation
CVE-2023-22916		 CWE-20 Medium
No
No
 5.36 25.04.2023 SB2023042508
#VU75461 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28771		 CWE-78 High
Available
Exploited
 5.36 25.04.2023 SB2023042507
#VU75460 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-27991		 CWE-78 Medium
No
No
 5.36 25.04.2023 SB2023042507
#VU75459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-27990		 CWE-79 Low
No
No
 5.36 25.04.2023 SB2023042507
#VU71972 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-38547		 CWE-78 Medium
No
No
 5.35 07.02.2023 SB2023020704
#VU69914 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40603		 CWE-79 Low
No
No
 5.32 06.12.2022 SB2022120602
#VU65413 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-2030		 CWE-22 Medium
No
No
 5.31 19.07.2022 SB2022071902
#VU65410 - Permissions, Privileges, and Access Controls
CVE-2022-30526		 CWE-264 Low
Available
No
 5.31 19.07.2022 SB2022071902
#VU63569 - Improper Access Control
CVE-2022-0910		 CWE-284 High
No
No
 5.30 24.05.2022 SB2022052406
#VU63562 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26532		 CWE-78 Low
No
No
 5.30 24.05.2022 SB2022052406
#VU63561 - Improper input validation
CVE-2022-26531		 CWE-20 Low
Available
No
 5.30 24.05.2022 SB2022052406
#VU63555 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0734		 CWE-79 Low
No
No
 5.30 24.05.2022 SB2022052406
#VU63145 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-30525		 CWE-78 High
Available
Exploited
 5.30 13.05.2022 SB2022051308
#VU61723 - Improper Authentication
CVE-2022-0342		 CWE-287 High
No
No
 5.21 30.03.2022 SB2022033003
#VU48673 - Memory corruption
 CWE-119 High
No
No
 4.39 week38, 10.03 patch 1 26.11.2020 SB2020112612


Showing elements 21 - 40 out of 37