cveboard RSS feed

CVE-2022-0342

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

USG/ZyWALL series firmware

Vendor
Zyxel
Product
USG/ZyWALL series firmware
Platforms
Unknown
Default status
Unknown
USG/ZyWALL series firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.20 through 4.70affectedUnavailableUnavailableUnavailableNone listed

USG FLEX series firmware

Vendor
Zyxel
Product
USG FLEX series firmware
Platforms
Unknown
Default status
Unknown
USG FLEX series firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.50 through 5.20affectedUnavailableUnavailableUnavailableNone listed

ATP series firmware

Vendor
Zyxel
Product
ATP series firmware
Platforms
Unknown
Default status
Unknown
ATP series firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.32 through 5.20affectedUnavailableUnavailableUnavailableNone listed

VPN series firmware

Vendor
Zyxel
Product
VPN series firmware
Platforms
Unknown
Default status
Unknown
VPN series firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.30 through 5.20affectedUnavailableUnavailableUnavailableNone listed

NSG series firmware

Vendor
Zyxel
Product
NSG series firmware
Platforms
Unknown
Default status
Unknown
NSG series firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.20 through 1.33 Patch 4affectedUnavailableUnavailableUnavailableNone listed