CVE-2022-30525 · Sandworm Watch

May 16, 2022high

CVE-2022-30525: Zyxel Multiple Firewalls OS Command Injection Vulnerability

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device. Required action: Apply updates per vendor instructions.

CVE-2022-30525EPSS 99.9%Multiple FirewallsZyxel

CISA KEV ↗ · unattributed attribution