How many zyxel usg1900 firmware CVEs are in CISA KEV?

Yes — 2 of zyxel usg1900 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of zyxel usg1900 firmware are affected?

7 distinct zyxel usg1900 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zyxel usg1900 firmware CVEs?

zyxel usg1900 firmware's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-522 (Insufficiently Protected Credentials), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical zyxel usg1900 firmware vulnerabilities are there?

zyxel usg1900 firmware has 4 critical and 0 high-severity CVEs.

What is the average severity of zyxel usg1900 firmware CVEs?

The average CVSS base score across zyxel usg1900 firmware's scored CVEs is 8.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

zyxel

6 CVEs

2 in CISA KEV

zyxel usg1900 firmware Vulnerabilities

Name: zyxel usg1900 firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for usg1900 firmware by zyxel.

6

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

8.4

Avg CVSS

2019–2021

Last updated July 2, 2021

Overview

zyxel usg1900 firmware has 6 published CVE records since 2019, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 8.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting zyxel usg1900 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include usg1900.

Severity and exploitation

How the CVSS severity of zyxel usg1900 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of zyxel usg1900 firmware's CVEs are confirmed exploited in the wild.

Public exploits

3

3 of zyxel usg1900 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every zyxel usg1900 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 4.301 CVE
<= 4.33\(aapl.0\)c01 CVE
4.31 <= v <= 4.311 CVE
4.35 <= v < 4.35\(aapl.3\)c01 CVE
4.35 <= v <= 4.641 CVE
4.60 <= v <= 4.601 CVE

Fixed in

4.35\(aapl.3\)c01 CVE

Find a version

6 CVEs

Sort

Critical vulnerability · 2021-07-02
CVE-2021-35029CWE-287
Critical · CVSS 9.8
EPSS 2.3% (81th pct)2021-07-02
Critical vulnerability · 2020-12-22
CVE-2020-29583
CISA KEV
Public exploit
CWE-522
Added to CISA KEV 2021-11-03
Critical · CVSS 10.0
EPSS 90.0% (100th pct)2020-12-22
ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
CVE-2020-9054
CISA KEV
Public exploit
Patch
Workaround
CWE-78
Added to CISA KEV 2022-03-25
Critical · CVSS 9.3
EPSS 100.0% (100th pct)2020-03-04
Medium vulnerability · 2019-06-27
CVE-2019-12581
Medium · CVSS 6.1
EPSS 6.4% (93th pct)2019-06-27
Critical vulnerability · 2019-06-27
CVE-2019-12583
Critical · CVSS 9.1
EPSS 43.9% (99th pct)2019-06-27
Medium vulnerability · 2019-04-22
CVE-2019-9955
Public exploit
Medium · CVSS 6.1
EPSS 20.9% (97th pct)2019-04-22

Common weakness types

The CWE weakness categories most often found in zyxel usg1900 firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many zyxel usg1900 firmware CVEs were published each year.

2019

3

2020

2

2021

1

Other zyxel products

Browse vulnerabilities for other products by zyxel.

usg flex 100w54 CVEs usg flex 20054 CVEs usg flex 50054 CVEs usg flex 70054 CVEs usg flex 10050 CVEs USG FLEX series firmware50 CVEs ATP series firmware48 CVEs usg flex 50w45 CVEs

All zyxel vulnerabilities

Frequently asked questions

Common questions about zyxel usg1900 firmware vulnerabilities.

How many CVEs does zyxel usg1900 firmware have?: zyxel usg1900 firmware has 6 published CVE records since 2019.
How many zyxel usg1900 firmware CVEs are in CISA KEV?: Yes — 2 of zyxel usg1900 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for zyxel usg1900 firmware vulnerabilities?: Yes — 3 of zyxel usg1900 firmware's CVEs have a known public exploit.
Which versions of zyxel usg1900 firmware are affected?: 7 distinct zyxel usg1900 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in zyxel usg1900 firmware CVEs?: zyxel usg1900 firmware's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-522 (Insufficiently Protected Credentials), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical zyxel usg1900 firmware vulnerabilities are there?: zyxel usg1900 firmware has 4 critical and 0 high-severity CVEs.
What is the average severity of zyxel usg1900 firmware CVEs?: The average CVSS base score across zyxel usg1900 firmware's scored CVEs is 8.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zyxel usg1900 firmware vulnerabilities

Monitor new zyxel usg1900 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing