Zyxel Security Advisories CVE

We care about your network security. It’s our highest priority and what drives us to deliver timely, useful advice on emerging vulnerabilities that you’ll find below.

Advisories

Zyxel security advisory for pre-authentication command injection vulnerability in NAS products

Zyxel security advisory for privilege escalation vulnerability in GS1900 series switches

Zyxel security advisory for buffer overflow vulnerability in 4G LTE and 5G NR outdoor routers

Zyxel security advisory for multiple buffer overflow vulnerabilities of firewalls - Unstable VPN Connection & Webinterface Login Issues

Security advisory - for multiple vulnerabilities of firewalls and APs

Zyxel security advisory for XSS vulnerability in NBG-418N v2 home router

Zyxel security advisory for post-authentication RCE in firewalls

Zyxel security advisory for DoS vulnerability of APs

Zyxel security advisory for XSS vulnerability and post-authentication command injection

Security Advisory - Security Misconfiguration Vulnerability for 4G LTE Indoor Routers [CVE-2023-22920]

Zyxel security advisory for OS command injection

Zyxel security advisory for multiple vulnerabilities in NBG-418N v2 home router

Security Advisory - DoS vulnerability of switches

Security Advisory - DNS Misconfiguration in NBG7510

Security Advisory - Command Injection and Buffer Overflow Culnerabilities of CPE, fiber ONTs, and WiFi Extenders

Zyxel security advisory for OS command injection vulnerabilities of GS1900, XGS1210, and XGS1250 series switches

Zyxel security advisory for format string vulnerability in NAS

Zyxel security advisory for pre-configured password vulnerability of LTE3301-M209

Zyxel security advisory for XSS vulnerability in firewalls

Zyxel security advisory for buffer overflow vulnerability in Realtek eCos SDK

Zyxel Security Advisories CVE

Zyxel security advisory for XSS vulnerability of GS1900 series switches

Zyxel security advisory for local privilege escalation and authenticated directory traversal vulnerabilities of firewalls CVE-2022-30526, CVE-2022-2030

Zyxel security advisory for password guessing vulnerability of GS1200 series switches

Zyxel security advisory for CRLF injection vulnerability in some legacy firewalls

Zyxel security advisory for multiple vulnerabilities of firewalls, AP controllers, and APs

Zyxel security advisory for OS command injection vulnerability of firewalls

Zyxel security advisory for OS command injection and buffer overflow vulnerabilities of CPE and ONTs

Zyxel security advisory for local privilege escalation vulnerability of AP Configurator

Zyxel security advisory for command injection and cross-site request forgery vulnerabilities of select Armor home routers

Security Advisory / Multiple vulnerabilities by SEC Consult

Zyxel security advisory for insufficient session expiration and cleartext storage of sensitive information vulnerabilities of NBG6604 home router

Zyxel security advisory for OS command injection vulnerabilities of GS1900, XGS1210, and XGS1250 series switches

Zyxel security advisory for Apache Log4j RCE vulnerability

Zyxel security advisory for pre-configured password management vulnerability of home routers and WiFi systems

Directory traversal and command injection of VPN2S

Zyxel Security Advisory for WiFi Simple Config Buffer Overflow Vulnerabilities

Zyxel security advisory for XSS vulnerability of GS1900 series switches

Security Vulnerability Alert and Firmware Patches - Firewall Series

Zyxel security advisory for FragAttacks against WiFi products

Zyxel security advisory for DNSpooq

Zyxel security advisory for a hardcoded credential vulnerability

Zyxel security advisory for AMNESIA:33 vulnerabilities

Zyxel security advisory for buffer overflow vulnerability

Zyxel security advisory for command injection vulnerability of firewalls 

Zyxel security advisory for vulnerabilities of CloudCNM SecuManagerMyZyxel

Security Issue (remote code execution vulnerability) in NAS and Firewall

Zyxel security advisory for buffer overflow vulnerability in Realtek eCos SDK

Zyxel security advisory for multiple dproxy-nexgen-related vulnerabilities in CPE

There are also a few practices that it’s good common sense to follow at all times: