Zyxel Emg3525-T50B Firmware vulnerabilities

23 known vulnerabilities affecting zyxel/emg3525-t50b_firmware.

Total CVEs

23

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1HIGH9MEDIUM13

Vulnerabilities

Page 2 of 2

CVE-2022-26413HIGHCVSS 8.0fixed in 5.50\(abpm.6\)c02022-04-11

CVE-2022-26413 [HIGH] CWE-78 CVE-2022-26413: A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABF A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.

CVE-2022-26414MEDIUMCVSS 5.5fixed in 5.50\(abpm.6\)c02022-04-11

CVE-2022-26414 [MEDIUM] CWE-120 CVE-2022-26414: A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312 A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.

CVE-2021-35036MEDIUMCVSS 6.5fixed in 5.50\(abpm.7\)c02022-03-01

CVE-2021-35036 [MEDIUM] CWE-312 CVE-2021-35036: A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(AB A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.

← Previous2 / 2