How many zyxel usg 40w firmware CVEs are in CISA KEV?

Yes — 2 of zyxel usg 40w firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of zyxel usg 40w firmware are affected?

7 distinct zyxel usg 40w firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zyxel usg 40w firmware CVEs?

zyxel usg 40w firmware's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-20 (Improper Input Validation), CWE-287 (Improper Authentication), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How many critical zyxel usg 40w firmware vulnerabilities are there?

zyxel usg 40w firmware has 2 critical and 2 high-severity CVEs.

What is the average severity of zyxel usg 40w firmware CVEs?

The average CVSS base score across zyxel usg 40w firmware's scored CVEs is 7.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

zyxel

7 CVEs

2 in CISA KEV

zyxel usg 40w firmware Vulnerabilities

Name: zyxel usg 40w firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for usg 40w firmware by zyxel.

7

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

7.6

Avg CVSS

2018–2023

Last updated May 24, 2023

Overview

zyxel usg 40w firmware has 7 published CVE records since 2018, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting zyxel usg 40w firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include usg 40w.

Severity and exploitation

How the CVSS severity of zyxel usg 40w firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of zyxel usg 40w firmware's CVEs are confirmed exploited in the wild.

Public exploits

4

4 of zyxel usg 40w firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every zyxel usg 40w firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

4.09 <= v <= 4.712 CVEs
4.73 <= v <= 4.732 CVEs
4.25 <= v < 4.731 CVE
4.32 <= v <= 4.711 CVE
4.35 <= v <= 4.701 CVE
4.60 <= v < 4.731 CVE

Fixed in

4.732 CVEs

Find a version

7 CVEs

Sort

Critical vulnerability · 2023-05-24
CVE-2023-33010
CISA KEV
Public exploit
Patch
CWE-120
Added to CISA KEV 2023-06-05
Critical · CVSS 9.3
EPSS 28.8% (98th pct)2023-05-24
Critical vulnerability · 2023-05-24
CVE-2023-33009
CISA KEV
Public exploit
Patch
CWE-120
Added to CISA KEV 2023-06-05
Critical · CVSS 10.0
EPSS 28.1% (98th pct)2023-05-24
High vulnerability · 2022-05-24
CVE-2022-26532
Public exploit
Patch
CWE-88
High · CVSS 7.8
EPSS 4.8% (91th pct)2022-05-24
Medium vulnerability · 2022-05-24
CVE-2022-0910CWE-287
Medium · CVSS 6.5
EPSS 0.7% (48th pct)2022-05-24
Medium vulnerability · 2022-05-24
CVE-2022-0734CWE-79
Medium · CVSS 6.1
EPSS 8.9% (95th pct)2022-05-24
High vulnerability · 2022-05-24
CVE-2022-26531
Public exploit
Patch
CWE-20
High · CVSS 7.8
EPSS 5.6% (92th pct)2022-05-24
Medium vulnerability · 2018-08-15
CVE-2018-9129
Medium · CVSS 5.9
EPSS 1.0% (58th pct)2018-08-15

Common weakness types

The CWE weakness categories most often found in zyxel usg 40w firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many zyxel usg 40w firmware CVEs were published each year.

2018

1

2022

4

2023

2

Other zyxel products

Browse vulnerabilities for other products by zyxel.

usg flex 100w54 CVEs usg flex 20054 CVEs usg flex 50054 CVEs usg flex 70054 CVEs usg flex 10050 CVEs USG FLEX series firmware50 CVEs ATP series firmware48 CVEs usg flex 50w45 CVEs

All zyxel vulnerabilities

Frequently asked questions

Common questions about zyxel usg 40w firmware vulnerabilities.

How many CVEs does zyxel usg 40w firmware have?: zyxel usg 40w firmware has 7 published CVE records since 2018.
How many zyxel usg 40w firmware CVEs are in CISA KEV?: Yes — 2 of zyxel usg 40w firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for zyxel usg 40w firmware vulnerabilities?: Yes — 4 of zyxel usg 40w firmware's CVEs have a known public exploit.
Which versions of zyxel usg 40w firmware are affected?: 7 distinct zyxel usg 40w firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in zyxel usg 40w firmware CVEs?: zyxel usg 40w firmware's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-20 (Improper Input Validation), CWE-287 (Improper Authentication), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How many critical zyxel usg 40w firmware vulnerabilities are there?: zyxel usg 40w firmware has 2 critical and 2 high-severity CVEs.
What is the average severity of zyxel usg 40w firmware CVEs?: The average CVSS base score across zyxel usg 40w firmware's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zyxel usg 40w firmware vulnerabilities

Monitor new zyxel usg 40w firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing