Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductAtp100 (eb1ea302-6a48-5b97-93bc-25dd90b4a42b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9133 not_vulnerable 2026-06-08 07:45:21.766162 Details available
HIGH (8.1)
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow a semi-authenticated attacker—who has completed only the first stage of the two-factor authentication (2FA) process—to view and download the system configuration from an affected device.
Published: 2025-10-21T01:57:20.265Z
Updated: 2026-02-26T16:57:22.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8078 not_vulnerable 2026-06-08 07:45:19.382276 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on the affected device by passing a crafted string as an argument to a CLI command.
Published: 2025-10-21T01:49:29.266Z
Updated: 2026-02-26T16:57:22.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7203 not_vulnerable 2026-06-08 06:58:21.501806 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.
Published: 2024-09-03T01:36:32.110Z
Updated: 2024-09-03T13:55:28.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6343 not_vulnerable 2026-06-08 06:58:18.691607 Details available
MEDIUM (4.9)
A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an authenticated attacker with administrator privileges to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
Published: 2024-09-03T01:28:27.056Z
Updated: 2024-09-03T13:47:31.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42061 not_vulnerable 2026-06-08 06:43:56.100736 Details available
MEDIUM (6.1)
A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. The attacker could obtain browser-based information if the malicious script is executed on the victim’s browser.
Published: 2024-09-03T01:59:36.884Z
Updated: 2024-09-03T13:48:38.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42060 not_vulnerable 2026-06-08 06:43:56.099204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42059 not_vulnerable 2026-06-08 06:43:56.091165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42058 not_vulnerable 2026-06-08 06:43:56.087997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42057 not_vulnerable 2026-06-08 06:43:56.073431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11667 not_vulnerable 2026-06-08 06:23:50.160256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6764 not_vulnerable 2026-06-08 06:21:55.682007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6399 not_vulnerable 2026-06-08 06:19:47.199532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6398 not_vulnerable 2026-06-08 06:19:47.174355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6397 not_vulnerable 2026-06-08 06:19:47.117033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5797 not_vulnerable 2026-06-08 06:19:44.747698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5650 not_vulnerable 2026-06-08 06:19:44.362417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4398 not_vulnerable 2026-06-08 06:16:12.277086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4397 not_vulnerable 2026-06-08 06:16:12.256310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37926 not_vulnerable 2026-06-08 06:08:16.271390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37925 not_vulnerable 2026-06-08 06:08:16.233433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35139 not_vulnerable 2026-06-08 06:06:26.612872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35136 not_vulnerable 2026-06-08 06:06:26.595985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33010 not_vulnerable 2026-06-08 06:04:48.252242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33009 not_vulnerable 2026-06-08 06:04:48.187248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28771 not_vulnerable 2026-06-08 06:02:35.665669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27991 not_vulnerable 2026-06-08 05:57:42.730628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27990 not_vulnerable 2026-06-08 05:57:42.698111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22918 not_vulnerable 2026-06-08 05:54:27.397035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22917 not_vulnerable 2026-06-08 05:54:27.388368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22916 not_vulnerable 2026-06-08 05:54:27.380224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40603 not_vulnerable 2026-06-08 05:48:27.682271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38547 not_vulnerable 2026-06-08 05:47:16.613271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30526 not_vulnerable 2026-06-08 05:43:38.166746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30525 not_vulnerable 2026-06-08 05:43:38.154124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2030 not_vulnerable 2026-06-08 05:42:50.100170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26532 not_vulnerable 2026-06-08 05:41:52.470046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26531 not_vulnerable 2026-06-08 05:41:52.377983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0910 not_vulnerable 2026-06-08 05:39:11.465414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0734 not_vulnerable 2026-06-08 05:39:10.688098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0342 not_vulnerable 2026-06-08 05:39:09.831934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9054 not_vulnerable 2026-06-08 05:27:20.389482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29583 not_vulnerable 2026-06-08 05:24:58.508806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.