Vulnerability Details CVE-2022-26531
Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmware versions 4.30 through 5.21, NSG series firmware versions 1.00 through 1.33 Patch 4, NXC2500 firmware version 6.10(AAIG.3) and earlier versions, NAP203 firmware version 6.25(ABFA.7) and earlier versions, NWA50AX firmware version 6.25(ABYW.5) and earlier versions, WAC500 firmware version 6.30(ABVS.2) and earlier versions, and WAX510D firmware version 6.30(ABTF.2) and earlier versions, that could allow a local authenticated attacker to cause a buffer overflow or a system crash via a crafted payload.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.2%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.6
Products affected by CVE-2022-26531
-
-
cpe:2.3:h:zyxel:atp100w:-
-
-
-
-
-
-
-
-
-
-
-
cpe:2.3:h:zyxel:nwa110ax:-
-
cpe:2.3:h:zyxel:nwa1123-ac-hd:-
-
cpe:2.3:h:zyxel:nwa1123-ac-pro:-
-
cpe:2.3:h:zyxel:nwa1123acv3:-
-
cpe:2.3:h:zyxel:nwa1302-ac:-
-
cpe:2.3:h:zyxel:nwa210ax:-
-
cpe:2.3:h:zyxel:nwa50ax:-
-
cpe:2.3:h:zyxel:nwa5123-ac-hd:-
-
cpe:2.3:h:zyxel:nwa55axe:-
-
cpe:2.3:h:zyxel:nwa90ax:-
-
cpe:2.3:h:zyxel:nxc2500:-
-
cpe:2.3:h:zyxel:nxc5500:-
-
-
-
-
cpe:2.3:h:zyxel:usg2200:-
-
-
-
cpe:2.3:h:zyxel:usg_1100:-
-
cpe:2.3:h:zyxel:usg_110:-
-
cpe:2.3:h:zyxel:usg_1900:-
-
cpe:2.3:h:zyxel:usg_20w-vpn:-
-
cpe:2.3:h:zyxel:usg_20w:-
-
cpe:2.3:h:zyxel:usg_2200-vpn:-
-
cpe:2.3:h:zyxel:usg_310:-
-
-
cpe:2.3:h:zyxel:usg_40w:-
-
-
cpe:2.3:h:zyxel:usg_60w:-
-
cpe:2.3:h:zyxel:usg_flex_100:-
-
cpe:2.3:h:zyxel:usg_flex_100w:-
-
cpe:2.3:h:zyxel:usg_flex_200:-
-
cpe:2.3:h:zyxel:usg_flex_500:-
-
cpe:2.3:h:zyxel:usg_flex_700:-
-
cpe:2.3:h:zyxel:vpn1000:-
-
-
-
-
-
cpe:2.3:h:zyxel:wac500h:-
-
cpe:2.3:h:zyxel:wac5302d-s:-
-
cpe:2.3:h:zyxel:wac5302d-sv2:-
-
cpe:2.3:h:zyxel:wac6103d-i:-
-
cpe:2.3:h:zyxel:wac6303d-s:-
-
cpe:2.3:h:zyxel:wac6502d-e:-
-
cpe:2.3:h:zyxel:wac6502d-s:-
-
cpe:2.3:h:zyxel:wac6503d-s:-
-
cpe:2.3:h:zyxel:wac6552d-s:-
-
cpe:2.3:h:zyxel:wac6553d-s:-
-
cpe:2.3:h:zyxel:wax510d:-
-
cpe:2.3:h:zyxel:wax610d:-
-
cpe:2.3:h:zyxel:wax630s:-
-
cpe:2.3:h:zyxel:wax650s:-
-
cpe:2.3:o:zyxel:atp100_firmware:4.32
-
cpe:2.3:o:zyxel:atp100_firmware:4.35
-
cpe:2.3:o:zyxel:atp100_firmware:4.35(abps.2)c0
-
cpe:2.3:o:zyxel:atp100_firmware:4.35(abps.3)c0
-
cpe:2.3:o:zyxel:atp100_firmware:4.60
-
cpe:2.3:o:zyxel:atp100_firmware:5.10
-
cpe:2.3:o:zyxel:atp100_firmware:5.20
-
cpe:2.3:o:zyxel:atp100w_firmware:4.32
-
cpe:2.3:o:zyxel:atp100w_firmware:4.60
-
cpe:2.3:o:zyxel:atp100w_firmware:5.10
-
cpe:2.3:o:zyxel:atp100w_firmware:5.20
-
cpe:2.3:o:zyxel:atp200_firmware:4.32
-
cpe:2.3:o:zyxel:atp200_firmware:4.35
-
cpe:2.3:o:zyxel:atp200_firmware:4.35(abfw.3)c0
-
cpe:2.3:o:zyxel:atp200_firmware:4.60
-
cpe:2.3:o:zyxel:atp200_firmware:5.10
-
cpe:2.3:o:zyxel:atp200_firmware:5.20
-
cpe:2.3:o:zyxel:atp500_firmware:4.32
-
cpe:2.3:o:zyxel:atp500_firmware:4.35
-
cpe:2.3:o:zyxel:atp500_firmware:4.35(abfu.3)c0
-
cpe:2.3:o:zyxel:atp500_firmware:4.60
-
cpe:2.3:o:zyxel:atp500_firmware:5.10
-
cpe:2.3:o:zyxel:atp500_firmware:5.20
-
cpe:2.3:o:zyxel:atp700_firmware:4.32
-
cpe:2.3:o:zyxel:atp700_firmware:4.60
-
cpe:2.3:o:zyxel:atp700_firmware:5.10
-
cpe:2.3:o:zyxel:atp700_firmware:5.20
-
cpe:2.3:o:zyxel:atp800_firmware:4.32
-
cpe:2.3:o:zyxel:atp800_firmware:4.35
-
cpe:2.3:o:zyxel:atp800_firmware:4.35(abiq.3)c0
-
cpe:2.3:o:zyxel:atp800_firmware:4.60
-
cpe:2.3:o:zyxel:atp800_firmware:5.10
-
cpe:2.3:o:zyxel:atp800_firmware:5.20
-
cpe:2.3:o:zyxel:nap203_firmware:-
-
cpe:2.3:o:zyxel:nap303_firmware:-
-
cpe:2.3:o:zyxel:nap353_firmware:-
-
cpe:2.3:o:zyxel:nsg100_firmware:*
-
cpe:2.3:o:zyxel:nsg100_firmware:1.33
-
cpe:2.3:o:zyxel:nsg300_firmware:1.20
-
cpe:2.3:o:zyxel:nsg300_firmware:1.33
-
cpe:2.3:o:zyxel:nsg50_firmware:*
-
cpe:2.3:o:zyxel:nsg50_firmware:1.33
-
cpe:2.3:o:zyxel:nwa110ax_firmware:-
-
cpe:2.3:o:zyxel:nwa1123-ac-hd_firmware:-
-
cpe:2.3:o:zyxel:nwa1123-ac-pro_firmware:-
-
cpe:2.3:o:zyxel:nwa1123acv3_firmware:-
-
cpe:2.3:o:zyxel:nwa1302-ac_firmware:*
-
cpe:2.3:o:zyxel:nwa210ax_firmware:-
-
cpe:2.3:o:zyxel:nwa50ax_firmware:-
-
cpe:2.3:o:zyxel:nwa5123-ac-hd_firmware:-
-
cpe:2.3:o:zyxel:nwa55axe_firmware:-
-
cpe:2.3:o:zyxel:nwa90ax_firmware:-
-
cpe:2.3:o:zyxel:nxc2500_firmware:-
-
cpe:2.3:o:zyxel:nxc2500_firmware:6.10(aaig.0)
-
cpe:2.3:o:zyxel:nxc2500_firmware:6.10(aaig.3)
-
cpe:2.3:o:zyxel:nxc5500_firmware:-
-
cpe:2.3:o:zyxel:nxc5500_firmware:6.10(aaos.0)
-
cpe:2.3:o:zyxel:usg200_firmware:4.35
-
cpe:2.3:o:zyxel:usg200_firmware:4.64
-
cpe:2.3:o:zyxel:usg20_firmware:4.35
-
cpe:2.3:o:zyxel:usg20_firmware:4.64
-
cpe:2.3:o:zyxel:usg210_firmware:4.30
-
cpe:2.3:o:zyxel:usg210_firmware:4.31
-
cpe:2.3:o:zyxel:usg210_firmware:4.33(aapi.0)c0
-
cpe:2.3:o:zyxel:usg210_firmware:4.35
-
cpe:2.3:o:zyxel:usg210_firmware:4.35(aapi.3)c0
-
cpe:2.3:o:zyxel:usg210_firmware:4.60
-
cpe:2.3:o:zyxel:usg210_firmware:4.64
-
cpe:2.3:o:zyxel:usg2200_firmware:4.35
-
cpe:2.3:o:zyxel:usg2200_firmware:4.35(abae.3)c0
-
cpe:2.3:o:zyxel:usg2200_firmware:4.60
-
cpe:2.3:o:zyxel:usg300_firmware:4.35
-
cpe:2.3:o:zyxel:usg300_firmware:4.64
-
cpe:2.3:o:zyxel:usg310_firmware:4.30
-
cpe:2.3:o:zyxel:usg310_firmware:4.31
-
cpe:2.3:o:zyxel:usg310_firmware:4.33(aapj.0)c0
-
cpe:2.3:o:zyxel:usg310_firmware:4.35
-
cpe:2.3:o:zyxel:usg310_firmware:4.35(aapj.3)c0
-
cpe:2.3:o:zyxel:usg310_firmware:4.60
-
cpe:2.3:o:zyxel:usg310_firmware:4.64
-
cpe:2.3:o:zyxel:usg_1100_firmware:*
-
cpe:2.3:o:zyxel:usg_110_firmware:*
-
cpe:2.3:o:zyxel:usg_1900_firmware:*
-
cpe:2.3:o:zyxel:usg_20w-vpn_firmware:4.16
-
cpe:2.3:o:zyxel:usg_20w_firmware:*
-
cpe:2.3:o:zyxel:usg_2200-vpn_firmware:4.20
-
cpe:2.3:o:zyxel:usg_2200-vpn_firmware:4.30
-
cpe:2.3:o:zyxel:usg_310_firmware:*
-
cpe:2.3:o:zyxel:usg_40_firmware:*
-
cpe:2.3:o:zyxel:usg_40w_firmware:*
-
cpe:2.3:o:zyxel:usg_60_firmware:*
-
cpe:2.3:o:zyxel:usg_60w_firmware:*
-
cpe:2.3:o:zyxel:usg_flex_100_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_100_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_100_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_100_firmware:5.01
-
cpe:2.3:o:zyxel:usg_flex_100_firmware:5.10
-
cpe:2.3:o:zyxel:usg_flex_100_firmware:5.20
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.01
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.10
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.01
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.20
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.01
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.10
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.20
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.10
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.20
-
cpe:2.3:o:zyxel:vpn1000_firmware:4.30
-
cpe:2.3:o:zyxel:vpn1000_firmware:4.35
-
cpe:2.3:o:zyxel:vpn1000_firmware:4.35(abip.3)c0
-
cpe:2.3:o:zyxel:vpn1000_firmware:4.60
-
cpe:2.3:o:zyxel:vpn1000_firmware:5.20
-
cpe:2.3:o:zyxel:vpn1000_firmware:5.21
-
cpe:2.3:o:zyxel:vpn100_firmware:4.30
-
cpe:2.3:o:zyxel:vpn100_firmware:4.35
-
cpe:2.3:o:zyxel:vpn100_firmware:4.35(abfv.3)c0
-
cpe:2.3:o:zyxel:vpn100_firmware:4.60
-
cpe:2.3:o:zyxel:vpn100_firmware:5.20
-
cpe:2.3:o:zyxel:vpn100_firmware:5.21
-
cpe:2.3:o:zyxel:vpn300_firmware:4.30
-
cpe:2.3:o:zyxel:vpn300_firmware:4.35
-
cpe:2.3:o:zyxel:vpn300_firmware:4.35(abfc.3)c0
-
cpe:2.3:o:zyxel:vpn300_firmware:4.60
-
cpe:2.3:o:zyxel:vpn300_firmware:5.20
-
cpe:2.3:o:zyxel:vpn300_firmware:5.21
-
cpe:2.3:o:zyxel:vpn50_firmware:4.30
-
cpe:2.3:o:zyxel:vpn50_firmware:4.35
-
cpe:2.3:o:zyxel:vpn50_firmware:4.35(abhl.3)c0
-
cpe:2.3:o:zyxel:vpn50_firmware:4.60
-
cpe:2.3:o:zyxel:vpn50_firmware:5.20
-
cpe:2.3:o:zyxel:vpn50_firmware:5.21
-
cpe:2.3:o:zyxel:wac500_firmware:-
-
cpe:2.3:o:zyxel:wac500h_firmware:-
-
cpe:2.3:o:zyxel:wac5302d-s_firmware:*
-
cpe:2.3:o:zyxel:wac5302d-sv2_firmware:-
-
cpe:2.3:o:zyxel:wac6103d-i_firmware:-
-
cpe:2.3:o:zyxel:wac6303d-s_firmware:*
-
cpe:2.3:o:zyxel:wac6502d-e_firmware:-
-
cpe:2.3:o:zyxel:wac6502d-s_firmware:-
-
cpe:2.3:o:zyxel:wac6503d-s_firmware:-
-
cpe:2.3:o:zyxel:wac6552d-s_firmware:-
-
cpe:2.3:o:zyxel:wac6553d-s_firmware:-
-
cpe:2.3:o:zyxel:wax510d_firmware:-
-
cpe:2.3:o:zyxel:wax610d_firmware:-
-
cpe:2.3:o:zyxel:wax630s_firmware:-
-
cpe:2.3:o:zyxel:wax650s_firmware:-