Zyxel USG50 Firmware vulnerabilities

2 CVEs affecting Zyxel USG50 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-35029, published 2021-07-02.

More from Zyxel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-35029, published 2021-07-02. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35…
• CVE-2016-10227, published 2017-02-21. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a flood of ICMPv4 Port Unreachable packets.