CVE-2022-0342
Critical
Description
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Zyxel Zywall 110 Firmware
PublishedMar 28, 2022
First seenMar 28, 2022
Weakness typeCWE-287Improper authentication
How to fix
Update
- zyxel zywall_110_firmware4.71 or later
- zyxel usg40_firmware4.71 or later
- zyxel usg40w_firmware4.71 or later
- zyxel usg60_firmware4.71 or later
- zyxel usg60w_firmware4.71 or later
- zyxel zywall_310_firmware4.71 or later
- zyxel zywall_1100_firmware4.71 or later
- zyxel vpn50_firmware5.21 or later
- zyxel vpn100_firmware5.21 or later
- zyxel vpn300_firmware5.21 or later
- zyxel vpn1000_firmware5.21 or later
- zyxel nsg300_firmware1.33 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel zywall_110_firmware | 4.20 ≤ v < 4.71 | 4.71 |
| zyxel usg40_firmware | 4.20 ≤ v < 4.71 | 4.71 |
| zyxel usg40w_firmware | 4.20 ≤ v < 4.71 | 4.71 |
| zyxel usg60_firmware | 4.20 ≤ v < 4.71 | 4.71 |
| zyxel usg60w_firmware | 4.20 ≤ v < 4.71 | 4.71 |
| zyxel zywall_310_firmware | 4.20 ≤ v < 4.71 | 4.71 |
| zyxel zywall_1100_firmware | 4.20 ≤ v < 4.71 | 4.71 |
| zyxel usg_flex_100_firmware | 4.50 ≤ v ≤ 5.20 | — |
| zyxel usg_flex_200_firmware | 4.50 ≤ v ≤ 5.20 | — |
| zyxel usg_flex_500_firmware | 4.50 ≤ v ≤ 5.20 | — |
| zyxel usg_flex_100w_firmware | 4.50 ≤ v ≤ 5.20 | — |
| zyxel usg_flex_700_firmware | 4.50 ≤ v ≤ 5.20 | — |
| zyxel atp100_firmware | 4.32 ≤ v ≤ 5.20 | — |
| zyxel atp100w_firmware | 4.32 ≤ v ≤ 5.20 | — |
| zyxel atp200_firmware | 4.32 ≤ v ≤ 5.20 | — |
| zyxel atp500_firmware | 4.32 ≤ v ≤ 5.20 | — |
| zyxel atp700_firmware | 4.32 ≤ v ≤ 5.20 | — |
| zyxel atp800_firmware | 4.32 ≤ v ≤ 5.20 | — |
| zyxel vpn50_firmware | 4.30 ≤ v < 5.21 | 5.21 |
| zyxel vpn100_firmware | 4.30 ≤ v < 5.21 | 5.21 |
| zyxel vpn300_firmware | 4.30 ≤ v < 5.21 | 5.21 |
| zyxel vpn1000_firmware | 4.30 ≤ v < 5.21 | 5.21 |
| zyxel nsg300_firmware | 1.20 ≤ v < 1.33, 1.33 | 1.33 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.