Zyxel Ep240P Firmware vulnerabilities

3 known vulnerabilities affecting zyxel/ep240p_firmware.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2022-26413HIGHCVSS 8.0fixed in 5.40\(abh.0\)c02022-04-11

CVE-2022-26413 [HIGH] CWE-78 CVE-2022-26413: A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABF A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface.

CVE-2022-26414MEDIUMCVSS 5.5fixed in 5.40\(abh.0\)c02022-04-11

CVE-2022-26414 [MEDIUM] CWE-120 CVE-2022-26414: A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312 A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service.

CVE-2021-35036MEDIUMCVSS 6.5fixed in 5.40\(abvh.0\)c0a032022-03-01

CVE-2021-35036 [MEDIUM] CWE-312 CVE-2021-35036: A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(AB A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.