What’s Vulnerable › Products

Zyxel USG FLEX 500 firmware vulnerabilities

34 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Zyxel USG FLEX 500 firmware version is affected

Exploited Zyxel USG FLEX 500 firmware vulnerabilities

• CVE-2023-33010 — Zyxel Multiple Firewalls Buffer Overflow Vulnerability
• CVE-2023-33009 — Zyxel Multiple Firewalls Buffer Overflow Vulnerability
• CVE-2023-28771 — Zyxel Multiple Firewalls OS Command Injection Vulnerability
• CVE-2022-30525 — Zyxel Multiple Firewalls OS Command Injection Vulnerability
• CVE-2020-29583 — Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability

Latest Zyxel USG FLEX 500 firmware vulnerabilities

• CVE-2023-6764 — (CVSS 8.1)
• CVE-2023-6399 — (CVSS 6.5)
• CVE-2023-6398 — (CVSS 7.2)
• CVE-2023-6397 — (CVSS 5.3)
• CVE-2023-34141 — (CVSS 8.0)
• CVE-2023-34140 — (CVSS 6.5)
• CVE-2023-34139 — (CVSS 8.8)
• CVE-2023-34138 — (CVSS 8.0)
• CVE-2023-33012 — (CVSS 8.8)
• CVE-2023-33011 — (CVSS 8.8)
• CVE-2023-28767 — (CVSS 8.8)
• CVE-2023-33010 — Zyxel Multiple Firewalls Buffer Overflow Vulnerability (CVSS 9.8) — exploited
• CVE-2023-33009 — Zyxel Multiple Firewalls Buffer Overflow Vulnerability (CVSS 9.8) — exploited
• CVE-2023-28771 — Zyxel Multiple Firewalls OS Command Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2023-27991 — (CVSS 8.8)
• CVE-2023-27990 — (CVSS 4.8)
• CVE-2023-22918 — (CVSS 6.5)
• CVE-2023-22917 — (CVSS 7.5)
• CVE-2023-22916 — (CVSS 8.1)
• CVE-2023-22915 — (CVSS 7.5)
• CVE-2023-22914 — (CVSS 7.2)
• CVE-2023-22913 — (CVSS 8.1)
• CVE-2022-38547 — (CVSS 7.2)
• CVE-2022-40603 — (CVSS 6.1)
• CVE-2022-30526 — (CVSS 7.8)