CVE-2022-30525

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Description

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Severity: CRITICAL

CVSS Score: 9.8

Vendor: Zyxel

Product: Multiple Firewalls