Количество 3
Количество 3
CVE-2023-5650
An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an authenticated local attacker to modify the URL of the registration page in the web GUI of an affected device.
GHSA-2fmp-mw85-gxqw
An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an authenticated local attacker to modify the URL of the registration page in the web GUI of an affected device.
BDU:2023-08278
Уязвимость командной оболочки ZySH микропрограммного обеспечения сетевых устройств ZyXEL USG FLEX, VPN и ATP, позволяющая нарушителю изменить URL-адрес страницы регистрации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-5650 An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an authenticated local attacker to modify the URL of the registration page in the web GUI of an affected device. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
| GHSA-2fmp-mw85-gxqw An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an authenticated local attacker to modify the URL of the registration page in the web GUI of an affected device. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
 | BDU:2023-08278 Уязвимость командной оболочки ZySH микропрограммного обеспечения сетевых устройств ZyXEL USG FLEX, VPN и ATP, позволяющая нарушителю изменить URL-адрес страницы регистрации | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу