Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-34141	Modificada	Alta (8)	0.68%	—	Zyxel USG 20w-vpn Firmware Zyxel USG 2200-vpn Firmware Zyxel USG Flex 100 Firmware Zyxel USG Flex 100w Firmware+20	17/7/2023	17/6/2026	A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.00…
CVE-2023-34140	Modificada	Media (6.5)	0.30%	—	Zyxel USG 20w-vpn Firmware Zyxel USG 2200-vpn Firmware Zyxel USG Flex 100 Firmware Zyxel USG Flex 100w Firmware+20	17/7/2023	17/6/2026	A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.16 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 4.16 through 5.36 Patch 2, VPN series firmware…
CVE-2023-34139	Modificada	Alta (8.8)	0.76%	—	Zyxel USG 2200-vpn Firmware Zyxel USG Flex 100 Firmware Zyxel USG Flex 100w Firmware Zyxel USG Flex 200 Firmware+11	17/7/2023	17/6/2026	A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device.
CVE-2023-34138	Modificada	Alta (8)	0.68%	—	Zyxel USG 20w-vpn Firmware Zyxel USG 2200-vpn Firmware Zyxel USG Flex 100 Firmware Zyxel USG Flex 100w Firmware+18	17/7/2023	17/6/2026	A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.60 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 4.60 through…
CVE-2023-33012	Modificada	Alta (8.8)	9.9%	💥 Exploit	Zyxel USG 20w-vpn Firmware Zyxel USG 2200-vpn Firmware Zyxel USG Flex 100 Firmware Zyxel USG Flex 100w Firmware+18	17/7/2023	17/6/2026	A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36…
CVE-2023-33011	Modificada	Alta (8.8)	0.34%	—	Zyxel USG 2200-vpn Firmware Zyxel USG Flex 100 Firmware Zyxel USG Flex 100w Firmware Zyxel USG Flex 200 Firmware+18	17/7/2023	17/6/2026	A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware…
CVE-2023-28767	Modificada	Alta (8.8)	0.40%	—	Zyxel USG 2200-vpn Firmware Zyxel USG Flex 100 Firmware Zyxel USG Flex 100w Firmware Zyxel USG Flex 200 Firmware+18	17/7/2023	17/6/2026	The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, USG FLEX 50(W) series firmware versions 5.10 through 5.36, USG20(W)-VPN series firmware versions 5.10 through 5.36, and VPN series firmware…
CVE-2018-9129	Modificada	Media (5.9)	0.97%	—	Zyxel Zywall 110 Firmware Zyxel Zywall 1100 Firmware Zyxel Zywall 310 Firmware Zyxel Zywall VPN 50 Firmware+13	15/8/2018	17/6/2026	ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.