CVE-2021-35029
Critical
Description
An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Zyxel Zywall Atp100 Firmware
PublishedJul 2, 2021
First seenJul 2, 2021
Weakness typeCWE-287Improper authentication
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel zywall_atp100_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel usg1900_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg1100_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg310_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg210_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg110_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg40_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg40w_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg60_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg60w_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg300_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg1000_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg2000_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg20_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg20w_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg50_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg100_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg200_firmware | 4.35 ≤ v ≤ 4.64 | — |
| zyxel usg_flex_100_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel usg_flex_200_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel usg_flex_500_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel usg_flex_100w_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel usg_flex_700_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_atp100w_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_atp200_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_atp500_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_atp700_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_atp800_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_vpn50_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_vpn100_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_vpn300_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel usg20-vpn_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel usg20w-vpn_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel usg2200-vpn_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_110_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_310_firmware | 4.35 ≤ v ≤ 5.01 | — |
| zyxel zywall_1100_firmware | 4.35 ≤ v ≤ 5.01 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.