Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:nsg:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductNsg (b84ed21a-af48-5b27-8e55-3fdf7571d198)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-29299 not_vulnerable 2026-06-08 05:24:58.085223 Details available
Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator before SD-OS V10.03 week32, USG before ZLD V4.39 week38, USG FLEX before ZLD V4.55 week38, ATP before ZLD V4.55 week38, and NSG before 1.33 patch 4.
Published: 2020-12-27T05:51:45.000Z
Updated: 2024-08-04T16:48:01.635Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.