Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior
Críticas / altas1376▼ 50 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 2.3% | — | Zyxel Usg1900 FirmwareZyxel Usg1100 FirmwareZyxel Usg310 FirmwareZyxel Usg210 Firmware+33 | 2/7/2021 | 17/6/2026 | An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device. | |
| Modificada | Media (6.1) | 6.4% | 💥 Exploit | Zyxel Uag2100 FirmwareZyxel Uag4100 FirmwareZyxel Uag5100 FirmwareZyxel Usg110 Firmware+5 | 27/6/2019 | 17/6/2026 | A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or HTML via the err_msg parameter. | |
| Modificada | Crítica (9.1) | 44% | 💥 Exploit | Zyxel Uag2100 FirmwareZyxel Uag4100 FirmwareZyxel Uag5100 FirmwareZyxel Usg110 Firmware+10 | 27/6/2019 | 17/6/2026 | Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service. | |
| Modificada | Media (6.1) | 21% | 💥 Exploit | Zyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp800 FirmwareZyxel Usg20-vpn Firmware+17 | 22/4/2019 | 17/6/2026 | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter. |