Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductAtp500 (ed91d794-ac48-54eb-95b0-70d597e8c519)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9133 not_vulnerable 2026-06-08 07:45:21.766499 Details available
HIGH (8.1)
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow a semi-authenticated attacker—who has completed only the first stage of the two-factor authentication (2FA) process—to view and download the system configuration from an affected device.
Published: 2025-10-21T01:57:20.265Z
Updated: 2026-02-26T16:57:22.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8078 not_vulnerable 2026-06-08 07:45:19.387444 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on the affected device by passing a crafted string as an argument to a CLI command.
Published: 2025-10-21T01:49:29.266Z
Updated: 2026-02-26T16:57:22.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7203 not_vulnerable 2026-06-08 06:58:21.501918 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.
Published: 2024-09-03T01:36:32.110Z
Updated: 2024-09-03T13:55:28.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6343 not_vulnerable 2026-06-08 06:58:18.694492 Details available
MEDIUM (4.9)
A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an authenticated attacker with administrator privileges to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
Published: 2024-09-03T01:28:27.056Z
Updated: 2024-09-03T13:47:31.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42061 not_vulnerable 2026-06-08 06:43:56.100792 Details available
MEDIUM (6.1)
A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. The attacker could obtain browser-based information if the malicious script is executed on the victim’s browser.
Published: 2024-09-03T01:59:36.884Z
Updated: 2024-09-03T13:48:38.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42060 not_vulnerable 2026-06-08 06:43:56.099427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42059 not_vulnerable 2026-06-08 06:43:56.091223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42058 not_vulnerable 2026-06-08 06:43:56.088243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42057 not_vulnerable 2026-06-08 06:43:56.076264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11667 not_vulnerable 2026-06-08 06:23:50.162905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6764 not_vulnerable 2026-06-08 06:21:55.693420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6399 not_vulnerable 2026-06-08 06:19:47.200122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6398 not_vulnerable 2026-06-08 06:19:47.174558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6397 not_vulnerable 2026-06-08 06:19:47.127465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5797 not_vulnerable 2026-06-08 06:19:44.747963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5650 not_vulnerable 2026-06-08 06:19:44.365283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4398 not_vulnerable 2026-06-08 06:16:12.277168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4397 not_vulnerable 2026-06-08 06:16:12.259559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37926 not_vulnerable 2026-06-08 06:08:16.271667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37925 not_vulnerable 2026-06-08 06:08:16.235550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35139 not_vulnerable 2026-06-08 06:06:26.613000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35136 not_vulnerable 2026-06-08 06:06:26.598236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33010 not_vulnerable 2026-06-08 06:04:48.252616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33009 not_vulnerable 2026-06-08 06:04:48.192278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28771 not_vulnerable 2026-06-08 06:02:35.671967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27991 not_vulnerable 2026-06-08 05:57:42.730703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27990 not_vulnerable 2026-06-08 05:57:42.701760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22918 not_vulnerable 2026-06-08 05:54:27.397107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22917 not_vulnerable 2026-06-08 05:54:27.388467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22916 not_vulnerable 2026-06-08 05:54:27.384632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40603 not_vulnerable 2026-06-08 05:48:27.679692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38547 not_vulnerable 2026-06-08 05:47:16.618400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30526 not_vulnerable 2026-06-08 05:43:38.166562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30525 not_vulnerable 2026-06-08 05:43:38.157339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2030 not_vulnerable 2026-06-08 05:42:50.097049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26532 not_vulnerable 2026-06-08 05:41:52.470243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26531 not_vulnerable 2026-06-08 05:41:52.381772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0910 not_vulnerable 2026-06-08 05:39:11.465692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0734 not_vulnerable 2026-06-08 05:39:10.688296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0342 not_vulnerable 2026-06-08 05:39:09.836406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9054 not_vulnerable 2026-06-08 05:27:20.392375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29583 not_vulnerable 2026-06-08 05:24:58.512977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9955 not_vulnerable 2026-06-08 05:14:26.692454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.