GCVE - cpe:2.3:o:zyxel:vmg4005-b60a_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:zyxel:vmg4005-b60a_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Zyxel (`d3fcf896-5708-55f8-8f74-3e19a9d55b89`)
Product	Vmg4005 B60A Firmware (`daec6433-e62b-5f6f-8e70-5af243c912af`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-9200`	vulnerable	2026-06-08 07:00:26.901972	Details available HIGH (7.2) A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions through V5.15(ABQA.2.2)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device. Published: 2024-12-03T01:33:47.398Z Updated: 2024-12-06T04:55:23.779Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43392`	vulnerable	2026-06-08 05:49:31.672147	Details available MEDIUM (6.5) A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request. Published: 2023-01-11T00:00:00.000Z Updated: 2024-11-27T17:13:31.757Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43391`	vulnerable	2026-06-08 05:49:31.661939	Details available MEDIUM (6.5) A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request. Published: 2023-01-11T00:00:00.000Z Updated: 2024-10-15T17:12:34.022Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43390`	vulnerable	2026-06-08 05:49:31.628921	Details available MEDIUM (5.4) A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request. Published: 2023-01-11T00:00:00.000Z Updated: 2025-04-08T20:16:36.803Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.