MEIFP – Most Exploited Internet-Facing Products

Zyxel

Products: AMG1302-T10B firmware · ATP series firmware · NAS326 firmware · NAS542 firmware · NWA1100-N firmware · USG FLEX 50(W) series firmware · USG FLEX series firmware · USG20(W)-VPN series firmware · VMG4325-B10A firmware

93.4

Score

CVEs

Active

PoC

KEV

#24

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-3577	2025-04-22	4.9v3.1	POC	—	Low	High	no	0.0	AMG1302-T10B firmware	UNSUPPORTED WHEN ASSIGNED A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an authenticated attacker with administrator privileges to access restricted directories by sending a crafted HTTP request to an affecte
CVE-2024-40890	2025-02-04	8.8v3.1	ACTIVE		Low	Low	no	26.4	VMG4325-B10A firmware	UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a
CVE-2024-40891	2025-02-04	8.8v3.1	ACTIVE		Low	Low	no	26.4	VMG4325-B10A firmware	UNSUPPORTED WHEN ASSIGNED A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via T
CVE-2024-11667	2024-11-27	7.5v3.1	ACTIVE		Low	None	YES	40.6	ATP series firmwareUSG FLEX 50(W) series firmwareUSG FLEX series firmwareUSG20(W)-VPN series firmware	A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V
CVE-2024-8234	2024-08-30	7.5v3.1	POC	—	Low	None	no	0.0	NWA1100-N firmware	UNSUPPORTED WHEN ASSIGNED A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and formDelcert() in the Zyxel NWA1100-N firmware version 1.00(AACE.1)C0 could allow an unauthenticated attacker to execute some OS commands to access system files on an affected devic
CVE-2024-29973	2024-06-04	9.8v3.1	POC	—	Low	None	YES	0.0	NAS326 firmwareNAS542 firmware	UNSUPPORTED WHEN ASSIGNED The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by se
CVE-2023-4473	2023-11-30	9.8v3.1	POC	—	Low	None	YES	0.0	NAS326 firmwareNAS542 firmware	A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted URL to a vulnerable device.
CVE-2023-4474	2023-11-30	9.8v3.1	POC	—	Low	None	YES	0.0	NAS326 firmwareNAS542 firmware	The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted URL to a vulnerable device

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3