Approved changes feed: RSS · Atom

cpe:2.3:o:zyxel:nsg_firmware:1.33:patch1:*:*:*:*:*:*

part: o version: 1.33 update: patch1

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductNsg Firmware (269b7e63-f7bd-5d53-a2e9-ab787ed760a0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-29299 vulnerable 2026-06-08 05:24:58.084524 Details available
Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator before SD-OS V10.03 week32, USG before ZLD V4.39 week38, USG FLEX before ZLD V4.55 week38, ATP before ZLD V4.55 week38, and NSG before 1.33 patch 4.
Published: 2020-12-27T05:51:45.000Z
Updated: 2024-08-04T16:48:01.635Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.