How many zyxel usg_flex_firmware CVEs are in CISA KEV?

Yes — 1 of zyxel usg_flex_firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for zyxel usg_flex_firmware vulnerabilities?

Yes — 1 of zyxel usg_flex_firmware's CVEs have a known public exploit.

Which versions of zyxel usg_flex_firmware are affected?

10 distinct zyxel usg_flex_firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zyxel usg_flex_firmware CVEs?

zyxel usg_flex_firmware's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-134 (Use of Externally-Controlled Format String), CWE-190 (Integer Overflow or Wraparound), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical zyxel usg_flex_firmware vulnerabilities are there?

zyxel usg_flex_firmware has 1 critical and 5 high-severity CVEs.

What is the average severity of zyxel usg_flex_firmware CVEs?

The average CVSS base score across zyxel usg_flex_firmware's scored CVEs is 8.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

zyxel

6 CVEs

1 in CISA KEV

zyxel usg_flex_firmware Vulnerabilities

Name: zyxel usg_flex_firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for usg_flex_firmware by zyxel.

6

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

8.2

Avg CVSS

2020–2024

Last updated November 27, 2024

Overview

zyxel usg_flex_firmware has 6 published CVE records since 2020, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting zyxel usg_flex_firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include usg flex.

Severity and exploitation

How the CVSS severity of zyxel usg_flex_firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High5

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of zyxel usg_flex_firmware's CVEs is confirmed exploited in the wild.

Public exploits

1

One of zyxel usg_flex_firmware's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every zyxel usg_flex_firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

4.50 <= v <= 5.36_Patch-21 CVE
4.50 <= v <= 5.371 CVE
4.50 <= v <= 5.37patch11 CVE
4.60 <= v <= 5.36 Patch 21 CVE
5.00 <= v <= 5.381 CVE

Fixed in

> 5.36 Patch 21 CVE
> 5.36_Patch-21 CVE
> 5.371 CVE
> 5.37patch11 CVE
> 5.381 CVE

Find a version

6 CVEs

Sort

Critical vulnerability · 2024-11-27
CVE-2024-11667
CISA KEV
Public exploit
Patch
CWE-22
Added to CISA KEV 2024-12-03
Critical · CVSS 9.3
EPSS 3.0% (86th pct)2024-11-27
High vulnerability · 2024-02-20
CVE-2023-6764
Patch
CWE-134
High · CVSS 8.1
EPSS 0.9% (56th pct)2024-02-20
High vulnerability · 2023-11-28
CVE-2023-4398
Patch
CWE-190
High · CVSS 7.5
EPSS 0.9% (55th pct)2023-11-28
High vulnerability · 2023-07-17
CVE-2023-34139
Patch
CWE-78
High · CVSS 8.8
EPSS 0.8% (52th pct)2023-07-17
High vulnerability · 2023-07-17
CVE-2023-34138
Patch
CWE-78
High · CVSS 8.0
EPSS 0.7% (49th pct)2023-07-17
High vulnerability · 2020-12-27
CVE-2020-29299
Patch
High · CVSS 7.2
EPSS 2.3% (82th pct)2020-12-27

Common weakness types

The CWE weakness categories most often found in zyxel usg_flex_firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many zyxel usg_flex_firmware CVEs were published each year.

2020

1

2023

3

2024

2

Other zyxel products

Browse vulnerabilities for other products by zyxel.

usg flex 100w54 CVEs usg flex 20054 CVEs usg flex 50054 CVEs usg flex 70054 CVEs usg flex 10050 CVEs USG FLEX series firmware50 CVEs ATP series firmware48 CVEs usg flex 50w45 CVEs

All zyxel vulnerabilities

Frequently asked questions

Common questions about zyxel usg_flex_firmware vulnerabilities.

How many CVEs does zyxel usg_flex_firmware have?: zyxel usg_flex_firmware has 6 published CVE records since 2020.
How many zyxel usg_flex_firmware CVEs are in CISA KEV?: Yes — 1 of zyxel usg_flex_firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for zyxel usg_flex_firmware vulnerabilities?: Yes — 1 of zyxel usg_flex_firmware's CVEs have a known public exploit.
Which versions of zyxel usg_flex_firmware are affected?: 10 distinct zyxel usg_flex_firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in zyxel usg_flex_firmware CVEs?: zyxel usg_flex_firmware's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-134 (Use of Externally-Controlled Format String), CWE-190 (Integer Overflow or Wraparound), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical zyxel usg_flex_firmware vulnerabilities are there?: zyxel usg_flex_firmware has 1 critical and 5 high-severity CVEs.
What is the average severity of zyxel usg_flex_firmware CVEs?: The average CVSS base score across zyxel usg_flex_firmware's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zyxel usg_flex_firmware vulnerabilities

Monitor new zyxel usg_flex_firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing