How many zyxel usg2200 firmware CVEs are in CISA KEV?

Yes — 2 of zyxel usg2200 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of zyxel usg2200 firmware are affected?

6 distinct zyxel usg2200 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zyxel usg2200 firmware CVEs?

zyxel usg2200 firmware's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-287 (Improper Authentication), CWE-522 (Insufficiently Protected Credentials), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical zyxel usg2200 firmware vulnerabilities are there?

zyxel usg2200 firmware has 2 critical and 2 high-severity CVEs.

What is the average severity of zyxel usg2200 firmware CVEs?

The average CVSS base score across zyxel usg2200 firmware's scored CVEs is 7.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

zyxel

6 CVEs

2 in CISA KEV

zyxel usg2200 firmware Vulnerabilities

Name: zyxel usg2200 firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for usg2200 firmware by zyxel.

6

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

7.9

Avg CVSS

2020–2022

Last updated May 24, 2022

Overview

zyxel usg2200 firmware has 6 published CVE records since 2020, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting zyxel usg2200 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include usg2200.

Severity and exploitation

How the CVSS severity of zyxel usg2200 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of zyxel usg2200 firmware's CVEs are confirmed exploited in the wild.

Public exploits

4

4 of zyxel usg2200 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every zyxel usg2200 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

4.09 <= v <= 4.712 CVEs
4.32 <= v <= 4.711 CVE
4.35 <= v < 4.35\(abae.3\)c01 CVE
4.35 <= v <= 4.701 CVE
4.60 <= v <= 4.601 CVE

Fixed in

4.35\(abae.3\)c01 CVE

Find a version

6 CVEs

Sort

High vulnerability · 2022-05-24
CVE-2022-26532
Public exploit
Patch
CWE-88
High · CVSS 7.8
EPSS 4.8% (91th pct)2022-05-24
Medium vulnerability · 2022-05-24
CVE-2022-0910CWE-287
Medium · CVSS 6.5
EPSS 0.7% (48th pct)2022-05-24
Medium vulnerability · 2022-05-24
CVE-2022-0734CWE-79
Medium · CVSS 6.1
EPSS 8.9% (95th pct)2022-05-24
High vulnerability · 2022-05-24
CVE-2022-26531
Public exploit
Patch
CWE-20
High · CVSS 7.8
EPSS 5.6% (92th pct)2022-05-24
Critical vulnerability · 2020-12-22
CVE-2020-29583
CISA KEV
Public exploit
CWE-522
Added to CISA KEV 2021-11-03
Critical · CVSS 10.0
EPSS 90.0% (100th pct)2020-12-22
ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
CVE-2020-9054
CISA KEV
Public exploit
Patch
Workaround
CWE-78
Added to CISA KEV 2022-03-25
Critical · CVSS 9.3
EPSS 100.0% (100th pct)2020-03-04

Common weakness types

The CWE weakness categories most often found in zyxel usg2200 firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many zyxel usg2200 firmware CVEs were published each year.

2020

2

2022

4

Other zyxel products

Browse vulnerabilities for other products by zyxel.

usg flex 100w54 CVEs usg flex 20054 CVEs usg flex 50054 CVEs usg flex 70054 CVEs usg flex 10050 CVEs USG FLEX series firmware50 CVEs ATP series firmware48 CVEs usg flex 50w45 CVEs

All zyxel vulnerabilities

Frequently asked questions

Common questions about zyxel usg2200 firmware vulnerabilities.

How many CVEs does zyxel usg2200 firmware have?: zyxel usg2200 firmware has 6 published CVE records since 2020.
How many zyxel usg2200 firmware CVEs are in CISA KEV?: Yes — 2 of zyxel usg2200 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for zyxel usg2200 firmware vulnerabilities?: Yes — 4 of zyxel usg2200 firmware's CVEs have a known public exploit.
Which versions of zyxel usg2200 firmware are affected?: 6 distinct zyxel usg2200 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in zyxel usg2200 firmware CVEs?: zyxel usg2200 firmware's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-287 (Improper Authentication), CWE-522 (Insufficiently Protected Credentials), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical zyxel usg2200 firmware vulnerabilities are there?: zyxel usg2200 firmware has 2 critical and 2 high-severity CVEs.
What is the average severity of zyxel usg2200 firmware CVEs?: The average CVSS base score across zyxel usg2200 firmware's scored CVEs is 7.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zyxel usg2200 firmware vulnerabilities

Monitor new zyxel usg2200 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing