← Database

CVE-2022-0342

CRITICAL CVSS: 9.8 Published: 2022-03-28 Modified: 2026-06-17

Description

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.

Affected Platforms

Zyxel Usg Flex 100 FirmwareZyxel Usg Flex 500Zyxel Atp500 FirmwareZyxel Usg40WZyxel Usg Flex 700Zyxel Atp700 FirmwareZyxel Usg Flex 700 FirmwareZyxel Atp700Zyxel Usg60W FirmwareZyxel Usg Flex 100W Firmware

Weakness Type

CWE-287, CWE-287

References