CVE security advisories and vulnerability history for usg20w-vpn by zyxel.
Last updated
zyxel usg20w-vpn has 12 published CVE records since 2019, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 8.1.
This page aggregates every publicly disclosed vulnerability (CVE) affecting zyxel usg20w-vpn, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of zyxel usg20w-vpn's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
2 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
3
3 of zyxel usg20w-vpn's CVEs are confirmed exploited in the wild.
Public exploits
5
5 of zyxel usg20w-vpn's CVEs have a known public exploit available.
Browse every zyxel usg20w-vpn version named in a CVE, then pick one to see only the CVEs that affect it.
No specific affected versions are recorded for zyxel usg20w-vpn; the CVEs below apply to the product without a version pin.
12 CVEs
Added to CISA KEV 2022-05-16
Added to CISA KEV 2021-11-03
Added to CISA KEV 2022-03-25
The CWE weakness categories most often found in zyxel usg20w-vpn CVEs. Follow any weakness for its full explanation.
How many zyxel usg20w-vpn CVEs were published each year.
Browse vulnerabilities for other products by zyxel.
Common questions about zyxel usg20w-vpn vulnerabilities.
zyxel usg20w-vpn has 12 published CVE records since 2019.
Yes — 3 of zyxel usg20w-vpn's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 5 of zyxel usg20w-vpn's CVEs have a known public exploit.
zyxel usg20w-vpn's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-134 (Use of Externally-Controlled Format String), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-269 (Improper Privilege Management).
zyxel usg20w-vpn has 4 critical and 4 high-severity CVEs.
The average CVSS base score across zyxel usg20w-vpn's scored CVEs is 8.1.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new zyxel usg20w-vpn vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
