Zyxel Zld vulnerabilities

21 CVEs affecting Zyxel Zld, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9133, published 2025-10-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-11667: Zyxel Multiple Firewalls Path Traversal Vulnerability, published 2024-11-27. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2024-12-03. EPSS: 2.9% chance of exploitation in the next 30 days. A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W)…
CVE-2025-9133, published 2025-10-21. High severity, CVSS 8.1. EPSS: 5.5% chance of exploitation in the next 30 days. A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware…
CVE-2020-25014, published 2020-11-27. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute…
CVE-2020-29299, published 2020-12-27. High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days. Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator…
CVE-2025-8078, published 2025-10-21. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series…
CVE-2024-7203, published 2024-09-03. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an…
CVE-2024-42060, published 2024-09-03. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series…
CVE-2024-42059, published 2024-09-03. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50(W) series…
CVE-2024-42057, published 2024-09-03. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W)…
CVE-2023-4398, published 2023-11-28. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware…

Latest

CVE-2024-42061, published 2024-09-03. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from…
CVE-2024-6343, published 2024-09-03. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series…
CVE-2024-42058, published 2024-09-03. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware…