CVE-2023-22914
High
Description
A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS commands in the “tmp” directory by uploading a crafted file if the hotspot function were enabled.
SeverityHigh
CVSS7.2
Exploit probability—
Product
Zyxel Usg Flex 100 Firmware
PublishedApr 24, 2023
First seenApr 24, 2023
Weakness typeCWE-22Path traversal
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel usg_flex_100_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel usg_flex_100w_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel usg_flex_200_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel usg_flex_50_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel usg_flex_50w_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel usg_flex_500_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel usg_flex_700_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel vpn100_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel vpn1000_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel vpn300_firmware | 4.50 ≤ v ≤ 5.35 | — |
| zyxel vpn50_firmware | 4.50 ≤ v ≤ 5.35 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.