CVE-2021-35029

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:zyxel:usg1900_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg1900:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:zyxel:usg1100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg1100:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:zyxel:usg310_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg310:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:zyxel:usg210_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg210:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:zyxel:usg110_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg110:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:zyxel:usg40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg40:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:zyxel:usg40w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg40w:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:zyxel:usg60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg60:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:zyxel:usg60w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg60w:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:zyxel:usg300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg300:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:zyxel:usg1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg1000:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:zyxel:usg2000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg2000:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:zyxel:usg20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg20:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:zyxel:usg20w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg20w:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:zyxel:usg50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg50:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:zyxel:usg100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg100:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:zyxel:usg200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg200:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:zyxel:zywall_atp100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_atp100:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:zyxel:zywall_atp100w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_atp100w:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:zyxel:zywall_atp200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_atp200:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:zyxel:zywall_atp500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_atp500:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:zyxel:zywall_atp700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_atp700:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:zyxel:zywall_atp800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_atp800:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:zyxel:zywall_vpn50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_vpn50:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:zyxel:zywall_vpn100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_vpn100:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:zyxel:zywall_vpn300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_vpn300:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg20-vpn:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:zyxel:usg20w-vpn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg20w-vpn:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:zyxel:usg2200-vpn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg2200-vpn:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:zyxel:zywall_110_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_110:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:zyxel:zywall_310_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_310:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:zyxel:zywall_1100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_1100:-:*:*:*:*:*:*:*

Information

Published : 2021-07-02 04:15

Updated : 2021-07-08 11:20


NVD link : CVE-2021-35029

Mitre link : CVE-2021-35029


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

zyxel

  • usg20w
  • usg60w
  • usg100_firmware
  • usg60
  • usg300
  • usg_flex_500
  • zywall_atp500_firmware
  • usg20w-vpn
  • usg_flex_100w_firmware
  • usg40w_firmware
  • usg210
  • zywall_310
  • usg2200-vpn_firmware
  • usg_flex_700_firmware
  • usg110_firmware
  • usg_flex_200
  • zywall_atp100w
  • usg_flex_100
  • zywall_atp800_firmware
  • zywall_atp700_firmware
  • zywall_vpn50
  • zywall_atp100_firmware
  • zywall_vpn300_firmware
  • usg2000
  • usg310_firmware
  • usg20
  • zywall_vpn100_firmware
  • usg20-vpn_firmware
  • zywall_atp200_firmware
  • zywall_1100_firmware
  • usg1000
  • usg1000_firmware
  • usg60w_firmware
  • usg2000_firmware
  • zywall_110
  • zywall_vpn50_firmware
  • usg200_firmware
  • usg40_firmware
  • usg1100_firmware
  • usg100
  • usg20w-vpn_firmware
  • zywall_1100
  • zywall_vpn100
  • zywall_atp500
  • usg1100
  • usg_flex_500_firmware
  • zywall_atp200
  • zywall_vpn300
  • zywall_atp100
  • usg20_firmware
  • usg1900_firmware
  • zywall_310_firmware
  • usg20w_firmware
  • usg310
  • usg40
  • usg210_firmware
  • usg_flex_100_firmware
  • usg110
  • zywall_atp100w_firmware
  • zywall_atp800
  • usg300_firmware
  • usg50
  • usg_flex_700
  • usg50_firmware
  • usg1900
  • usg2200-vpn
  • usg_flex_200_firmware
  • usg60_firmware
  • zywall_atp700
  • usg20-vpn
  • zywall_110_firmware
  • usg40w
  • usg_flex_100w
  • usg200