Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductAtp200 (d23a55ff-c8e4-58f9-951e-5c8f1e695623)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9133 not_vulnerable 2026-06-08 07:45:21.766477 Details available
HIGH (8.1)
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow a semi-authenticated attacker—who has completed only the first stage of the two-factor authentication (2FA) process—to view and download the system configuration from an affected device.
Published: 2025-10-21T01:57:20.265Z
Updated: 2026-02-26T16:57:22.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8078 not_vulnerable 2026-06-08 07:45:19.386566 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on the affected device by passing a crafted string as an argument to a CLI command.
Published: 2025-10-21T01:49:29.266Z
Updated: 2026-02-26T16:57:22.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7203 not_vulnerable 2026-06-08 06:58:21.501900 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.
Published: 2024-09-03T01:36:32.110Z
Updated: 2024-09-03T13:55:28.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6343 not_vulnerable 2026-06-08 06:58:18.693714 Details available
MEDIUM (4.9)
A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an authenticated attacker with administrator privileges to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
Published: 2024-09-03T01:28:27.056Z
Updated: 2024-09-03T13:47:31.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42061 not_vulnerable 2026-06-08 06:43:56.100774 Details available
MEDIUM (6.1)
A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. The attacker could obtain browser-based information if the malicious script is executed on the victim’s browser.
Published: 2024-09-03T01:59:36.884Z
Updated: 2024-09-03T13:48:38.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42060 not_vulnerable 2026-06-08 06:43:56.099407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42059 not_vulnerable 2026-06-08 06:43:56.091204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42058 not_vulnerable 2026-06-08 06:43:56.088114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42057 not_vulnerable 2026-06-08 06:43:56.075419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11667 not_vulnerable 2026-06-08 06:23:50.162230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6764 not_vulnerable 2026-06-08 06:21:55.689575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6399 not_vulnerable 2026-06-08 06:19:47.199926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6398 not_vulnerable 2026-06-08 06:19:47.174497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6397 not_vulnerable 2026-06-08 06:19:47.124401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5797 not_vulnerable 2026-06-08 06:19:44.747859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5650 not_vulnerable 2026-06-08 06:19:44.364334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4398 not_vulnerable 2026-06-08 06:16:12.277140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4397 not_vulnerable 2026-06-08 06:16:12.258350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37926 not_vulnerable 2026-06-08 06:08:16.271552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37925 not_vulnerable 2026-06-08 06:08:16.234958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35139 not_vulnerable 2026-06-08 06:06:26.612982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35136 not_vulnerable 2026-06-08 06:06:26.597544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33010 not_vulnerable 2026-06-08 06:04:48.252314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33009 not_vulnerable 2026-06-08 06:04:48.189680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28771 not_vulnerable 2026-06-08 06:02:35.669557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27991 not_vulnerable 2026-06-08 05:57:42.730484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27990 not_vulnerable 2026-06-08 05:57:42.696586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22918 not_vulnerable 2026-06-08 05:54:27.396997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22917 not_vulnerable 2026-06-08 05:54:27.388434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22916 not_vulnerable 2026-06-08 05:54:27.382911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40603 not_vulnerable 2026-06-08 05:48:27.680720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38547 not_vulnerable 2026-06-08 05:47:16.614817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30526 not_vulnerable 2026-06-08 05:43:38.166596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30525 not_vulnerable 2026-06-08 05:43:38.156282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2030 not_vulnerable 2026-06-08 05:42:50.098048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26532 not_vulnerable 2026-06-08 05:41:52.470206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26531 not_vulnerable 2026-06-08 05:41:52.380363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0910 not_vulnerable 2026-06-08 05:39:11.465650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0734 not_vulnerable 2026-06-08 05:39:10.688256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0342 not_vulnerable 2026-06-08 05:39:09.834751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9054 not_vulnerable 2026-06-08 05:27:20.390578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29583 not_vulnerable 2026-06-08 05:24:58.511661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9955 not_vulnerable 2026-06-08 05:14:26.691402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.