← Database

CVE-2021-35028

HIGH CVSS: 7.3 Published: 2021-09-29 Modified: 2026-06-17

Description

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands.

Affected Platforms

Zyxel Zywall Vpn2S FirmwareZyxel Zywall Vpn2S

Weakness Type

CWE-78, CWE-78

References