← Database

CVE-2022-38547

HIGH CVSS: 7.2 Published: 2023-02-07 Modified: 2026-06-17

Description

A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72, VPN series firmware versions 4.30 through 5.32, USG FLEX series firmware versions 4.50 through 5.32, and ATP series firmware versions 4.32 through 5.32, which could allow an authenticated attacker with administrator privileges to execute OS commands.

Affected Platforms

Zyxel Usg Flex 100 FirmwareZyxel Atp500 FirmwareZyxel Usg Flex 500Zyxel Usg40WZyxel Atp700 FirmwareZyxel Usg Flex 700Zyxel Atp700Zyxel Usg Flex 700 FirmwareZyxel Usg60W FirmwareZyxel Usg Flex 100W Firmware

Weakness Type

CWE-78, CWE-78

References