Vulnerability Lookup

🛡️ CVE-2022-30525

🔴 CVSS 9.8 — Critical ⚠️ Exploit Public CWE-78 NVD

9.8

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Details

Severity CRITICAL

CVSS Score 9.8

CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE CWE-78

Public Exploit ⚠️ Yes

Source NVD

Published 2022-05-12

Updated 2026-06-08

Modified 2025-10-27

Fix URL N/A

Affected Packages

Software	From version	Fixed in
atp100-firmware	5.10	5.30
atp100w-firmware	5.10	5.30
atp200-firmware	5.10	5.30
atp500-firmware	5.10	5.30
atp700-firmware	5.10	5.30
atp800-firmware	5.10	5.30
usg-flex-100w-firmware	5.00	5.30
usg-flex-200-firmware	5.00	5.30
usg-flex-500-firmware	5.00	5.30
usg-flex-50w-firmware	5.10	5.30
usg-flex-700-firmware	5.00	5.30
usg20w-vpn-firmware	5.10	5.30
vpn100-firmware	4.60	5.30
vpn1000-firmware	4.60	5.30
vpn300-firmware	4.60	5.30
vpn50-firmware	4.60	5.30

References

Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/167176/Zyxel-Remote-Command-Execution.html

Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.html

Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html

Exploit, Third Party Advisory http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html

Vendor Advisory https://www.zyxel.com/support/Zyxel-security-advisory-for-OS-command-injection-vulnerability-of-firewalls.shtml

Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/167176/Zyxel-Remote-Command-Execution.html

Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/167182/Zyxel-Firewall-ZTP-Unauthenticated-Command-Injection.html

Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/167372/Zyxel-USG-FLEX-5.21-Command-Injection.html

Exploit, Third Party Advisory http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html

Vendor Advisory https://www.zyxel.com/support/Zyxel-security-advisory-for-OS-command-injection-vulnerability-of-firewalls.shtml

US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-30525

🔗 NVD 🔗 Mitre

Similar Threats

Medium CVE-2023-6397
High CVE-2023-6398
Critical CVE-2023-33009
Critical CVE-2023-33010
Critical CVE-2023-28771

Free Vulnerability Check

Is your WordPress site affected?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Is your WordPress site affected?

Company

Resources

Services

Trusted

Subscribe