CVE-2018-9129: Zyxel Usg 1100 Firmware

Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days.

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake implementation used for IPsec based VPN connections.

Affected products

• Zyxel Usg 1100 Firmware: affected versions not specified
• Zyxel Usg 110 Firmware: affected versions not specified
• Zyxel Usg 1900 Firmware: affected versions not specified
• Zyxel Usg 20w-VPN Firmware: affected versions not specified
• Zyxel Usg 20w Firmware: affected versions not specified
• Zyxel Usg 2200-VPN Firmware: affected versions not specified
• Zyxel Usg 310 Firmware: affected versions not specified
• Zyxel Usg 40 Firmware: affected versions not specified
• Zyxel Usg 40w Firmware: affected versions not specified
• Zyxel Usg 60 Firmware: affected versions not specified
• Zyxel Usg 60w Firmware: affected versions not specified
• Zyxel Zywall 1100 Firmware: affected versions not specified
• Zyxel Zywall 110 Firmware: affected versions not specified
• Zyxel Zywall 310 Firmware: affected versions not specified
• Zyxel Zywall VPN 100 Firmware: affected versions not specified
• Zyxel Zywall VPN 300 Firmware: affected versions not specified
• Zyxel Zywall VPN 50 Firmware: affected versions not specified

Published 2018-08-15. Last modified 2026-06-17.