Vulnerability Details CVE-2022-30526
A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50(W) firmware versions 4.16 through 5.30, USG20(W)-VPN firmware versions 4.16 through 5.30, ATP series firmware versions 4.32 through 5.30, VPN series firmware versions 4.30 through 5.30, USG/ZyWALL series firmware versions 4.09 through 4.72, which could allow a local attacker to execute some OS commands with root privileges in some directories on a vulnerable device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.03
EPSS Ranking 85.9%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2022-30526
-
-
cpe:2.3:h:zyxel:atp100w:-
-
-
-
-
-
cpe:2.3:h:zyxel:usg20-vpn:-
-
cpe:2.3:h:zyxel:usg20w-vpn:-
-
-
-
-
-
cpe:2.3:h:zyxel:usg_2200-vpn:-
-
cpe:2.3:h:zyxel:usg_flex_100w:-
-
cpe:2.3:h:zyxel:usg_flex_200:-
-
cpe:2.3:h:zyxel:usg_flex_500:-
-
cpe:2.3:h:zyxel:usg_flex_50w:-
-
cpe:2.3:h:zyxel:usg_flex_700:-
-
cpe:2.3:h:zyxel:vpn1000:-
-
-
-
-
cpe:2.3:h:zyxel:zywall_1100:-
-
cpe:2.3:h:zyxel:zywall_110:-
-
cpe:2.3:h:zyxel:zywall_310:-
-
cpe:2.3:o:zyxel:atp100_firmware:4.32
-
cpe:2.3:o:zyxel:atp100_firmware:4.35
-
cpe:2.3:o:zyxel:atp100_firmware:4.35(abps.2)c0
-
cpe:2.3:o:zyxel:atp100_firmware:4.35(abps.3)c0
-
cpe:2.3:o:zyxel:atp100_firmware:4.60
-
cpe:2.3:o:zyxel:atp100_firmware:5.10
-
cpe:2.3:o:zyxel:atp100_firmware:5.20
-
cpe:2.3:o:zyxel:atp100_firmware:5.30
-
cpe:2.3:o:zyxel:atp100w_firmware:4.32
-
cpe:2.3:o:zyxel:atp100w_firmware:4.60
-
cpe:2.3:o:zyxel:atp100w_firmware:5.10
-
cpe:2.3:o:zyxel:atp100w_firmware:5.20
-
cpe:2.3:o:zyxel:atp100w_firmware:5.30
-
cpe:2.3:o:zyxel:atp200_firmware:4.32
-
cpe:2.3:o:zyxel:atp200_firmware:4.35
-
cpe:2.3:o:zyxel:atp200_firmware:4.35(abfw.3)c0
-
cpe:2.3:o:zyxel:atp200_firmware:4.60
-
cpe:2.3:o:zyxel:atp200_firmware:5.10
-
cpe:2.3:o:zyxel:atp200_firmware:5.20
-
cpe:2.3:o:zyxel:atp200_firmware:5.30
-
cpe:2.3:o:zyxel:atp500_firmware:4.32
-
cpe:2.3:o:zyxel:atp500_firmware:4.35
-
cpe:2.3:o:zyxel:atp500_firmware:4.35(abfu.3)c0
-
cpe:2.3:o:zyxel:atp500_firmware:4.60
-
cpe:2.3:o:zyxel:atp500_firmware:5.10
-
cpe:2.3:o:zyxel:atp500_firmware:5.20
-
cpe:2.3:o:zyxel:atp500_firmware:5.30
-
cpe:2.3:o:zyxel:atp700_firmware:4.32
-
cpe:2.3:o:zyxel:atp700_firmware:4.60
-
cpe:2.3:o:zyxel:atp700_firmware:5.10
-
cpe:2.3:o:zyxel:atp700_firmware:5.20
-
cpe:2.3:o:zyxel:atp700_firmware:5.30
-
cpe:2.3:o:zyxel:atp800_firmware:4.32
-
cpe:2.3:o:zyxel:atp800_firmware:4.35
-
cpe:2.3:o:zyxel:atp800_firmware:4.35(abiq.3)c0
-
cpe:2.3:o:zyxel:atp800_firmware:4.60
-
cpe:2.3:o:zyxel:atp800_firmware:5.10
-
cpe:2.3:o:zyxel:atp800_firmware:5.20
-
cpe:2.3:o:zyxel:atp800_firmware:5.30
-
cpe:2.3:o:zyxel:usg20-vpn_firmware:4.31
-
cpe:2.3:o:zyxel:usg20-vpn_firmware:4.35
-
cpe:2.3:o:zyxel:usg20-vpn_firmware:4.35(abaq.3)c0
-
cpe:2.3:o:zyxel:usg20-vpn_firmware:4.60
-
cpe:2.3:o:zyxel:usg20-vpn_firmware:5.01
-
cpe:2.3:o:zyxel:usg20-vpn_firmware:5.10
-
cpe:2.3:o:zyxel:usg20w-vpn_firmware:4.16
-
cpe:2.3:o:zyxel:usg20w-vpn_firmware:4.31
-
cpe:2.3:o:zyxel:usg20w-vpn_firmware:4.35
-
cpe:2.3:o:zyxel:usg20w-vpn_firmware:4.35(abar.3)c0
-
cpe:2.3:o:zyxel:usg20w-vpn_firmware:4.60
-
cpe:2.3:o:zyxel:usg20w-vpn_firmware:5.01
-
cpe:2.3:o:zyxel:usg20w-vpn_firmware:5.10
-
cpe:2.3:o:zyxel:usg20w-vpn_firmware:5.30
-
cpe:2.3:o:zyxel:usg40_firmware:4.20
-
cpe:2.3:o:zyxel:usg40_firmware:4.31
-
cpe:2.3:o:zyxel:usg40_firmware:4.35
-
cpe:2.3:o:zyxel:usg40_firmware:4.35(aala.3)c0
-
cpe:2.3:o:zyxel:usg40_firmware:4.60
-
cpe:2.3:o:zyxel:usg40_firmware:4.64
-
cpe:2.3:o:zyxel:usg40_firmware:4.70
-
cpe:2.3:o:zyxel:usg40_firmware:4.71
-
cpe:2.3:o:zyxel:usg40w_firmware:4.20
-
cpe:2.3:o:zyxel:usg40w_firmware:4.31
-
cpe:2.3:o:zyxel:usg40w_firmware:4.35
-
cpe:2.3:o:zyxel:usg40w_firmware:4.35(aalb.3)c0
-
cpe:2.3:o:zyxel:usg40w_firmware:4.60
-
cpe:2.3:o:zyxel:usg40w_firmware:4.64
-
cpe:2.3:o:zyxel:usg40w_firmware:4.70
-
cpe:2.3:o:zyxel:usg40w_firmware:4.71
-
cpe:2.3:o:zyxel:usg60_firmware:4.20
-
cpe:2.3:o:zyxel:usg60_firmware:4.31
-
cpe:2.3:o:zyxel:usg60_firmware:4.35
-
cpe:2.3:o:zyxel:usg60_firmware:4.35(aaky.3)c0
-
cpe:2.3:o:zyxel:usg60_firmware:4.60
-
cpe:2.3:o:zyxel:usg60_firmware:4.64
-
cpe:2.3:o:zyxel:usg60_firmware:4.70
-
cpe:2.3:o:zyxel:usg60_firmware:4.71
-
cpe:2.3:o:zyxel:usg60w_firmware:4.20
-
cpe:2.3:o:zyxel:usg60w_firmware:4.31
-
cpe:2.3:o:zyxel:usg60w_firmware:4.35
-
cpe:2.3:o:zyxel:usg60w_firmware:4.35(aakz.3)c0
-
cpe:2.3:o:zyxel:usg60w_firmware:4.60
-
cpe:2.3:o:zyxel:usg60w_firmware:4.64
-
cpe:2.3:o:zyxel:usg60w_firmware:4.70
-
cpe:2.3:o:zyxel:usg60w_firmware:4.71
-
cpe:2.3:o:zyxel:usg_2200-vpn_firmware:4.30
-
cpe:2.3:o:zyxel:usg_2200-vpn_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.01
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.10
-
cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.30
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.01
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.20
-
cpe:2.3:o:zyxel:usg_flex_200_firmware:5.30
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.01
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.10
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.20
-
cpe:2.3:o:zyxel:usg_flex_500_firmware:5.30
-
cpe:2.3:o:zyxel:usg_flex_50w_firmware:4.16
-
cpe:2.3:o:zyxel:usg_flex_50w_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_50w_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.10
-
cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.30
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:4.50
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:4.60
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.00
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.10
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.20
-
cpe:2.3:o:zyxel:usg_flex_700_firmware:5.30
-
cpe:2.3:o:zyxel:vpn1000_firmware:4.30
-
cpe:2.3:o:zyxel:vpn1000_firmware:4.35
-
cpe:2.3:o:zyxel:vpn1000_firmware:4.35(abip.3)c0
-
cpe:2.3:o:zyxel:vpn1000_firmware:4.60
-
cpe:2.3:o:zyxel:vpn1000_firmware:5.20
-
cpe:2.3:o:zyxel:vpn1000_firmware:5.21
-
cpe:2.3:o:zyxel:vpn1000_firmware:5.30
-
cpe:2.3:o:zyxel:vpn100_firmware:4.30
-
cpe:2.3:o:zyxel:vpn100_firmware:4.35
-
cpe:2.3:o:zyxel:vpn100_firmware:4.35(abfv.3)c0
-
cpe:2.3:o:zyxel:vpn100_firmware:4.60
-
cpe:2.3:o:zyxel:vpn100_firmware:5.20
-
cpe:2.3:o:zyxel:vpn100_firmware:5.21
-
cpe:2.3:o:zyxel:vpn100_firmware:5.30
-
cpe:2.3:o:zyxel:vpn300_firmware:4.30
-
cpe:2.3:o:zyxel:vpn300_firmware:4.35
-
cpe:2.3:o:zyxel:vpn300_firmware:4.35(abfc.3)c0
-
cpe:2.3:o:zyxel:vpn300_firmware:4.60
-
cpe:2.3:o:zyxel:vpn300_firmware:5.20
-
cpe:2.3:o:zyxel:vpn300_firmware:5.21
-
cpe:2.3:o:zyxel:vpn300_firmware:5.30
-
cpe:2.3:o:zyxel:vpn50_firmware:4.30
-
cpe:2.3:o:zyxel:vpn50_firmware:4.35
-
cpe:2.3:o:zyxel:vpn50_firmware:4.35(abhl.3)c0
-
cpe:2.3:o:zyxel:vpn50_firmware:4.60
-
cpe:2.3:o:zyxel:vpn50_firmware:5.20
-
cpe:2.3:o:zyxel:vpn50_firmware:5.21
-
cpe:2.3:o:zyxel:vpn50_firmware:5.30
-
cpe:2.3:o:zyxel:zywall_1100_firmware:4.31
-
cpe:2.3:o:zyxel:zywall_1100_firmware:4.33(aaac.0)c0
-
cpe:2.3:o:zyxel:zywall_1100_firmware:4.35
-
cpe:2.3:o:zyxel:zywall_1100_firmware:4.70
-
cpe:2.3:o:zyxel:zywall_1100_firmware:4.71
-
cpe:2.3:o:zyxel:zywall_1100_firmware:5.01
-
cpe:2.3:o:zyxel:zywall_110_firmware:4.31
-
cpe:2.3:o:zyxel:zywall_110_firmware:4.33(aaaa.0)c0
-
cpe:2.3:o:zyxel:zywall_110_firmware:4.35
-
cpe:2.3:o:zyxel:zywall_110_firmware:4.70
-
cpe:2.3:o:zyxel:zywall_110_firmware:4.71
-
cpe:2.3:o:zyxel:zywall_110_firmware:5.01
-
cpe:2.3:o:zyxel:zywall_310_firmware:4.31
-
cpe:2.3:o:zyxel:zywall_310_firmware:4.33(aaab.0)c0
-
cpe:2.3:o:zyxel:zywall_310_firmware:4.35
-
cpe:2.3:o:zyxel:zywall_310_firmware:4.70
-
cpe:2.3:o:zyxel:zywall_310_firmware:4.71
-
cpe:2.3:o:zyxel:zywall_310_firmware:5.01