Description
Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| atp_firmware | zyxel / atp_firmware | >= 5.00, <= 5.38 | affected |
| ATP series firmware | Zyxel / ATP series firmware | versions V5.00 through V5.38 | affected |
| usg20-vpn_firmware | zyxel / usg20-vpn_firmware | >= 5.10, <= 5.38 | affected |
| USG20(W)-VPN series firmware | Zyxel / USG20(W)-VPN series firmware | versions V5.10 through V5.38 | affected |
| usg_flex_50w_firmware | zyxel / usg_flex_50w_firmware | >= 5.10, < 5.38 | affected |
| USG FLEX 50(W) series firmware | Zyxel / USG FLEX 50(W) series firmware | versions V5.10 through V5.38 | affected |
| usg_flex_firmware | zyxel / usg_flex_firmware | >= 5.00, <= 5.38 | affected |
| USG FLEX series firmware | Zyxel / USG FLEX series firmware | versions V5.00 through V5.38 | affected |