← Database

CVE-2021-35029

CRITICAL CVSS: 9.8 Published: 2021-07-02 Modified: 2026-06-17

Description

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device.

Affected Platforms

Zyxel Usg Flex 100 FirmwareZyxel Usg110 FirmwareZyxel Usg1100 FirmwareZyxel Usg20WZyxel Usg300Zyxel Usg Flex 500Zyxel Usg40WZyxel Usg1000Zyxel Usg Flex 700Zyxel Usg2000

Weakness Type

CWE-287, CWE-287

References