HackerFeeds
All CVEs

CVE-2022-30525

CRITICAL9.8
CISA KEV

Published 2022-05-12 · Updated 2026-06-17 · Source security@zyxel.com.tw

Summary

CVE-2022-30525 is a critical-severity (CVSS 9.8) vulnerability in Zyxel Multiple Firewalls. CISA added it to the Known Exploited Vulnerabilities catalog on May 16, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by June 6, 2022. CISA does not currently list it as used in ransomware campaigns. Zyxel has 13 vulnerabilities in the KEV catalog, 2 of them linked to ransomware.

All 13 known-exploited Zyxel vulnerabilities →

Description

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-78CWE-78

CISA Known-Exploited Vulnerability

Product: Zyxel — Multiple Firewalls

Name: Zyxel Multiple Firewalls OS Command Injection Vulnerability

Date added: 2022-05-16 · Due: 2022-06-06

Required action: Apply updates per vendor instructions.

References

View on NVD