Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductUsg Flex 700 (1bd1edef-675e-5935-8f55-44db8660d956)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9133 not_vulnerable 2026-06-08 07:45:21.767027 Details available
HIGH (8.1)
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow a semi-authenticated attacker—who has completed only the first stage of the two-factor authentication (2FA) process—to view and download the system configuration from an affected device.
Published: 2025-10-21T01:57:20.265Z
Updated: 2026-02-26T16:57:22.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8078 not_vulnerable 2026-06-08 07:45:19.395942 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on the affected device by passing a crafted string as an argument to a CLI command.
Published: 2025-10-21T01:49:29.266Z
Updated: 2026-02-26T16:57:22.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7203 not_vulnerable 2026-06-08 06:58:21.502334 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.
Published: 2024-09-03T01:36:32.110Z
Updated: 2024-09-03T13:55:28.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6343 not_vulnerable 2026-06-08 06:58:18.704878 Details available
MEDIUM (4.9)
A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an authenticated attacker with administrator privileges to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
Published: 2024-09-03T01:28:27.056Z
Updated: 2024-09-03T13:47:31.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42061 not_vulnerable 2026-06-08 06:43:56.101217 Details available
MEDIUM (6.1)
A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. The attacker could obtain browser-based information if the malicious script is executed on the victim’s browser.
Published: 2024-09-03T01:59:36.884Z
Updated: 2024-09-03T13:48:38.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42060 not_vulnerable 2026-06-08 06:43:56.099874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42059 not_vulnerable 2026-06-08 06:43:56.097291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42058 not_vulnerable 2026-06-08 06:43:56.088887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42057 not_vulnerable 2026-06-08 06:43:56.083896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11667 not_vulnerable 2026-06-08 06:23:50.170704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6764 not_vulnerable 2026-06-08 06:21:55.741822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6399 not_vulnerable 2026-06-08 06:19:47.207059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6398 not_vulnerable 2026-06-08 06:19:47.179403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6397 not_vulnerable 2026-06-08 06:19:47.161526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5960 not_vulnerable 2026-06-08 06:19:45.214559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5797 not_vulnerable 2026-06-08 06:19:44.748426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5650 not_vulnerable 2026-06-08 06:19:44.371961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4398 not_vulnerable 2026-06-08 06:16:12.277723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4397 not_vulnerable 2026-06-08 06:16:12.266759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37926 not_vulnerable 2026-06-08 06:08:16.272021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37925 not_vulnerable 2026-06-08 06:08:16.242438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35139 not_vulnerable 2026-06-08 06:06:26.613256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35136 not_vulnerable 2026-06-08 06:06:26.599726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34141 not_vulnerable 2026-06-08 06:06:24.646632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34140 not_vulnerable 2026-06-08 06:06:24.628005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34139 not_vulnerable 2026-06-08 06:06:24.618797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34138 not_vulnerable 2026-06-08 06:06:24.597938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33012 not_vulnerable 2026-06-08 06:04:48.294262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33011 not_vulnerable 2026-06-08 06:04:48.272829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33010 not_vulnerable 2026-06-08 06:04:48.253680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33009 not_vulnerable 2026-06-08 06:04:48.211292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28771 not_vulnerable 2026-06-08 06:02:35.676320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28767 not_vulnerable 2026-06-08 06:02:35.596329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27991 not_vulnerable 2026-06-08 05:57:42.731192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27990 not_vulnerable 2026-06-08 05:57:42.712193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22918 not_vulnerable 2026-06-08 05:54:27.397343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22917 not_vulnerable 2026-06-08 05:54:27.388163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22916 not_vulnerable 2026-06-08 05:54:27.375922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22915 not_vulnerable 2026-06-08 05:54:27.369539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22914 not_vulnerable 2026-06-08 05:54:27.364344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22913 not_vulnerable 2026-06-08 05:54:27.357538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40603 not_vulnerable 2026-06-08 05:48:27.688408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38547 not_vulnerable 2026-06-08 05:47:16.626430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30526 not_vulnerable 2026-06-08 05:43:38.165927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30525 not_vulnerable 2026-06-08 05:43:38.148336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2030 not_vulnerable 2026-06-08 05:42:50.090352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26532 not_vulnerable 2026-06-08 05:41:52.470921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26531 not_vulnerable 2026-06-08 05:41:52.405128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0910 not_vulnerable 2026-06-08 05:39:11.467746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0734 not_vulnerable 2026-06-08 05:39:10.709583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0342 not_vulnerable 2026-06-08 05:39:09.830456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35029 not_vulnerable 2026-06-08 05:32:17.427383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29583 not_vulnerable 2026-06-08 05:24:58.529734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25014 not_vulnerable 2026-06-08 05:22:35.836930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.