Zyxel EP240P Firmware vulnerabilities

4 CVEs affecting Zyxel EP240P Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43389, published 2023-01-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-26413, published 2022-04-11. High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days. A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable…
CVE-2022-43389, published 2023-01-11. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to…
CVE-2021-35036, published 2022-03-01. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the…
CVE-2022-26414, published 2022-04-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker…