CVE-2022-0342

Scores

EPSS

0.924high92.4%

0%20%40%60%80%100%

Percentile: 92.4%

CVSS

9.8critical3.x

0246810

CVSS Score: 9.8/10

All CVSS Scores

CVSS 3.x

9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0

7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.

Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-287

Related Vulnerabilities

BDU:2022-01727

Vulnerable Software (23)

Type: Configuration

Vendor: *

Product: atp100_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.32",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: atp100w_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncludi...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.32",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: atp200_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.32",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: atp500_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.32",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: atp700_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.32",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: atp800_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.32",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: nsg300_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:nsg300_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "1.33",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:nsg300_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "1.33",          "versionStartIncluding": "1.20",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:o:zyxel:nsg300_firmware:1.33:-:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:o:zyxel:nsg300_firmware:1.33:p4:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:nsg300:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg40_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg40_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "4.71",          "versionStartIncluding...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg40_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "4.71",          "versionStartIncluding": "4.20",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg40:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg40w_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg40w_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "4.71",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg40w_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "4.71",          "versionStartIncluding": "4.20",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg40w:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg60_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg60_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "4.71",          "versionStartIncluding...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg60_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "4.71",          "versionStartIncluding": "4.20",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg60:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg60w_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg60w_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "4.71",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg60w_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "4.71",          "versionStartIncluding": "4.20",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg60w:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg_flex_100_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIn...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.50",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg_flex_100w_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartI...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.50",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg_flex_200_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIn...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.50",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg_flex_500_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIn...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.50",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: usg_flex_700_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIn...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "5.20",          "versionStartIncluding": "4.50",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: vpn1000_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "5.21",          "versionStartIncludi...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "5.21",          "versionStartIncluding": "4.30",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: vpn100_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "5.21",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "5.21",          "versionStartIncluding": "4.30",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: vpn300_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "5.21",          "versionStartIncludin...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "5.21",          "versionStartIncluding": "4.30",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: vpn50_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "5.21",          "versionStartIncluding...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",          "versionEndExcluding": "5.21",          "versionStartIncluding": "4.30",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Russian Vulnerability Scanner Database

CVE-2022-0342

Scores

EPSS

CVSS

All CVSS Scores

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality Impact

Integrity Impact

Availability Impact

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Authentication

Confidentiality Impact

Integrity Impact

Availability Impact

Description

Scaner-VS 7 — a modern vulnerability management solution

Sources

CWEs

Related Vulnerabilities

Vulnerable Software (23)