Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Uos
(Zyxel)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 3 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-02-20 | CVE-2023-6398 | A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37 Patch 1, USG20(W)-VPN series firmware versions from 4.16 through 5.37 Patch 1, USG FLEX H series firmware versions from 1.10 through 1.10 Patch 1, NWA50AX firmware versions through 6.29(ABYW.3), WAC500 firmware... | Atp100_firmware, Atp100w_firmware, Atp200_firmware, Atp500_firmware, Atp700_firmware, Atp800_firmware, Nwa110ax_firmware, Nwa1123acv3_firmware, Nwa210ax_firmware, Nwa220ax\-6e_firmware, Nwa50ax\-Pro_firmware, Nwa50ax_firmware, Nwa55axe_firmware, Nwa90ax\-Pro_firmware, Nwa90ax_firmware, Uos, Usg20\-Vpn_firmware, Usg20w\-Vpn_firmware, Usg_flex_100_firmware, Usg_flex_100ax_firmware, Usg_flex_100h_firmware, Usg_flex_100w_firmware, Usg_flex_200_firmware, Usg_flex_200h_firmware, Usg_flex_200hp_firmware, Usg_flex_500_firmware, Usg_flex_500h_firmware, Usg_flex_50_firmware, Usg_flex_50w_firmware, Usg_flex_700_firmware, Usg_flex_700h_firmware, Wac500_firmware, Wac500h_firmware, Wax300h_firmware, Wax510d_firmware, Wax610d_firmware, Wax620d\-6e_firmware, Wax630s_firmware, Wax640s\-6e_firmware, Wax650s_firmware, Wax655e_firmware, Wbe660s_firmware | N/A | ||
| 2024-02-20 | CVE-2023-6399 | A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37 Patch 1, USG20(W)-VPN series firmware versions from 4.16 through 5.37 Patch 1, and USG FLEX H series firmware versions from 1.10 through 1.10 Patch 1 could allow an authenticated IPSec VPN user to cause DoS conditions against the “deviceid” daemon by sending a... | Atp100_firmware, Atp100w_firmware, Atp200_firmware, Atp500_firmware, Atp700_firmware, Atp800_firmware, Uos, Usg20\-Vpn_firmware, Usg20w\-Vpn_firmware, Usg_flex_100_firmware, Usg_flex_100ax_firmware, Usg_flex_100h_firmware, Usg_flex_100w_firmware, Usg_flex_200_firmware, Usg_flex_200h_firmware, Usg_flex_200hp_firmware, Usg_flex_500_firmware, Usg_flex_500h_firmware, Usg_flex_50_firmware, Usg_flex_50w_firmware, Usg_flex_700_firmware, Usg_flex_700h_firmware | 6.5 | ||
| 2024-10-22 | CVE-2024-9677 | The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version V1.21 and earlier versions could allow an authenticated local attacker to gain privilege escalation by stealing the authentication token of a login administrator. Note that this attack could be successful only if the administrator has not logged out. | Uos | 7.8 |