Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Zyxel
Atp500 Firmware

zyxel atp500 firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

25 CVEs

6 in CISA KEV

zyxel atp500 firmware Vulnerabilities

CVE security advisories and vulnerability history for atp500 firmware by zyxel.

25

Total CVEs

Published

6

In CISA KEV

Exploited in the wild

10

Public exploits

With known exploit

7.6

Avg CVSS

2019–2024

Last updated February 20, 2024

Overview

zyxel atp500 firmware has 25 published CVE records since 2019, of which 6 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting zyxel atp500 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of zyxel atp500 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High8

Medium9

Low0

1 additional CVE has no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

6

6 of zyxel atp500 firmware's CVEs are confirmed exploited in the wild.

Public exploits

10

10 of zyxel atp500 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every zyxel atp500 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

5.366 CVEs
5.374 CVEs
4.35\(abfu.3\)c01 CVE
5.301 CVE

Find a version

25 CVEs

Sort

High vulnerability · 2024-02-20
CVE-2023-6764
Patch
CWE-134
High · CVSS 8.1
EPSS 2.3% (85th pct)2024-02-20
Medium vulnerability · 2024-02-20
CVE-2023-6399
Patch
CWE-134
Medium · CVSS 5.7
EPSS 0.3% (54th pct)2024-02-20
High vulnerability · 2024-02-20
CVE-2023-6398
Patch
CWE-78
High · CVSS 7.2
EPSS 0.7% (73th pct)2024-02-20
Medium vulnerability · 2024-02-20
CVE-2023-6397
Patch
CWE-476
Medium · CVSS 6.5
EPSS 0.1% (32th pct)2024-02-20
Critical vulnerability · 2023-05-24
CVE-2023-33010
CISA KEV
Public exploit
Patch
CWE-120
Added to CISA KEV 2023-06-05
Critical · CVSS 9.3
EPSS 7.3% (92th pct)2023-05-24
Critical vulnerability · 2023-05-24
CVE-2023-33009
CISA KEV
Public exploit
Patch
CWE-120
Added to CISA KEV 2023-06-05
Critical · CVSS 10.0
EPSS 5.6% (90th pct)2023-05-24
Critical vulnerability · 2023-04-25
CVE-2023-28771
CISA KEV
Public exploit
Patch
CWE-78
Added to CISA KEV 2023-05-31
Critical · CVSS 9.3
EPSS 94.3% (100th pct)2023-04-25
High vulnerability · 2023-04-24
CVE-2023-27991
Patch
CWE-78
High · CVSS 8.8
EPSS 2.3% (85th pct)2023-04-24
Medium vulnerability · 2023-04-24
CVE-2023-27990
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.4% (59th pct)2023-04-24
Medium vulnerability · 2023-04-24
CVE-2023-22918
Patch
CWE-359
Medium · CVSS 6.5
EPSS 0.2% (38th pct)2023-04-24
High vulnerability · 2023-04-24
CVE-2023-22917CWE-120
High · CVSS 7.5
EPSS 0.3% (56th pct)2023-04-24
High vulnerability · 2023-04-24
CVE-2023-22916CWE-20
High · CVSS 8.1
EPSS 0.3% (57th pct)2023-04-24
High vulnerability · 2023-02-07
CVE-2022-38547CWE-78
High · CVSS 7.2
EPSS 1.5% (81th pct)2023-02-07
Medium vulnerability · 2022-12-06
CVE-2022-40603CWE-79
Medium · CVSS 4.7
EPSS 0.7% (72th pct)2022-12-06
Medium vulnerability · 2022-07-19
CVE-2022-2030CWE-22
Medium · CVSS 6.5
EPSS 1.3% (80th pct)2022-07-19
High vulnerability · 2022-07-19
CVE-2022-30526
Public exploit
CWE-269
High · CVSS 7.8
EPSS 2.5% (86th pct)2022-07-19
High vulnerability · 2022-05-24
CVE-2022-26532
Public exploit
Patch
CWE-88
High · CVSS 7.8
EPSS 1.2% (79th pct)2022-05-24
Medium vulnerability · 2022-05-24
CVE-2022-0910CWE-287
Medium · CVSS 6.5
EPSS 0.2% (36th pct)2022-05-24
Medium vulnerability · 2022-05-24
CVE-2022-0734CWE-79
Medium · CVSS 5.8
EPSS 0.3% (56th pct)2022-05-24
Medium vulnerability · 2022-05-24
CVE-2022-26531
Public exploit
Patch
CWE-20
Medium · CVSS 6.1
EPSS 1.0% (77th pct)2022-05-24
Critical vulnerability · 2022-05-12
CVE-2022-30525
CISA KEV
Public exploit
Patch
CWE-78
Added to CISA KEV 2022-05-16
Critical · CVSS 9.3
EPSS 94.4% (100th pct)2022-05-12
Critical vulnerability · 2022-03-28
CVE-2022-0342
Patch
CWE-287
Critical · CVSS 9.8
EPSS 92.4% (100th pct)2022-03-28
Critical vulnerability · 2020-12-22
CVE-2020-29583
CISA KEV
Public exploit
CWE-522
Added to CISA KEV 2021-11-03
Critical · CVSS 10.0
EPSS 94.3% (100th pct)2020-12-22
ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
CVE-2020-9054
CISA KEV
Public exploit
Patch
Workaround
CWE-78
Added to CISA KEV 2022-03-25
Critical · CVSS 9.3
EPSS 94.3% (100th pct)2020-03-04
Vulnerability · 2019-04-22
CVE-2019-9955
Public exploit
Unscored
EPSS 10.7% (93th pct)2019-04-22

Common weakness types

The CWE weakness categories most often found in zyxel atp500 firmware CVEs. Follow any weakness for its full explanation.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-134Use of Externally-Controlled Format String2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1 CVE
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE

Disclosure activity by year

How many zyxel atp500 firmware CVEs were published each year.

2019

1

2020

2

2022

9

2023

9

2024

4

Other zyxel products

Browse vulnerabilities for other products by zyxel.

usg flex 100w54 CVEs usg flex 20054 CVEs usg flex 50054 CVEs usg flex 70054 CVEs usg flex 10050 CVEs USG FLEX series firmware50 CVEs ATP series firmware48 CVEs usg flex 50w45 CVEs

All zyxel vulnerabilities

Frequently asked questions

Common questions about zyxel atp500 firmware vulnerabilities.

How many CVEs does zyxel atp500 firmware have?

zyxel atp500 firmware has 25 published CVE records since 2019.

How many zyxel atp500 firmware CVEs are in CISA KEV?

Yes — 6 of zyxel atp500 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for zyxel atp500 firmware vulnerabilities?

Yes — 10 of zyxel atp500 firmware's CVEs have a known public exploit.

Which versions of zyxel atp500 firmware are affected?

4 distinct zyxel atp500 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zyxel atp500 firmware CVEs?

zyxel atp500 firmware's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-134 (Use of Externally-Controlled Format String).

How many critical zyxel atp500 firmware vulnerabilities are there?

zyxel atp500 firmware has 7 critical and 8 high-severity CVEs.

What is the average severity of zyxel atp500 firmware CVEs?

The average CVSS base score across zyxel atp500 firmware's scored CVEs is 7.6.

References

All zyxel vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zyxel atp500 firmware vulnerabilities

Monitor new zyxel atp500 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References