OS Command Injection in ZyXEL Communications Corp. products - CVE-2022-30525
Published: May 13, 2022 / Updated: February 27, 2024
Vulnerability identifier: #VU63145
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-30525
CWE-ID: CWE-78
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation in the CGI program. A remote unauthenticated attacker can pass specially crafted data to the application and execute arbitrary OS commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
USG FLEX 100W
USG20W-VPN
USG FLEX 50W
USG FLEX 700
USG FLEX 500
USG FLEX 200
VPN series
ATP series
USG20W-VPN
USG FLEX 50W
USG FLEX 700
USG FLEX 500
USG FLEX 200
VPN series
ATP series
How to mitigate CVE-2022-30525
Install updates from vendor's website.
USG FLEX 100W - update to 5.30
VPN series - update to 5.30
ATP series - update to 5.30
USG20W-VPN - update to 5.30
USG FLEX 50W - update to 5.30
USG FLEX 700 - update to 5.30
USG FLEX 500 - update to 5.30
USG FLEX 200 - update to 5.30
VPN series - update to 5.30
ATP series - update to 5.30
USG20W-VPN - update to 5.30
USG FLEX 50W - update to 5.30
USG FLEX 700 - update to 5.30
USG FLEX 500 - update to 5.30
USG FLEX 200 - update to 5.30
Links to Public Exploits and PoC-codes
- Exploit #9567 - CVE-2022-30525_Exploit (Exploit for CVE-2022-30525) (February 27, 2024)
- Exploit #8759 - CVE-2022-30525_check () (January 22, 2023)
- Exploit #8044 - Zyxel USG FLEX 5.21 - OS Command Injection (June 15, 2022)
- Exploit #8040 - CVE-2022-30525 (CVE-2022-30525 POC) (June 15, 2022)
- Exploit #7917 - CVE-2022-30525-Zyxel- () (May 29, 2022)
- Exploit #7872 - cve-2022-30525 (Initial POC for the CVE-2022-30525) (May 23, 2022)
- Exploit #7866 - CVE-2022-30525-Reverse-Shell () (May 19, 2022)
- Exploit #7852 - CVE-2022-30525 (CVE-2022-30525（Zxyel 防火墙命令注入）的概念证明漏洞利用) (May 17, 2022)
- Exploit #7845 - CVE-2022-30525 (Zyxel 防火墙未经身份验证的远程命令注入) (May 16, 2022)
- Exploit #7843 - CVE-2022-30525 (Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）) (May 16, 2022)
- Exploit #7841 - victorian_machinery (Proof of concept exploit for CVE-2022-30525 (Zxyel firewall command injection)) (May 16, 2022)
- Exploit #7835 - CVE-2022-30525 (Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）批量检测脚本) (May 16, 2022)
- Exploit #7833 - CVE-2022-30525 (Zyxel Firewall Remote Command Injection Vulnerability (CVE-2022-30525) Batch Detection Script) (May 16, 2022)
- Exploit #7830 - Zyxel Firewall ZTP Unauthenticated Command Injection (May 14, 2022)