Sploitus

CVE-2022-30525

26 known exploits for CVE-2022-30525

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Affected products
Zyxel Atp Series, Zyxel Usg Flex 100, Zyxel Usg Flex 200, Zyxel Usg Flex 50, Zyxel Usg Flex 500, Zyxel Usg Flex 700, Zyxel Usg20(W)-Vpn, Zyxel Vpn Series
Zyxel Usg Flex 100w Firmware
< 5.30
Fix
Available
CVSS 2.0
10.0 HIGH
CVSS 3.1
9.8 CRITICAL
EPSS
99.9% (100th percentile)
Weakness
CWE-78
NVD status
Analyzed
Published
2022-05-12
CVE-2022-30525 at NVD
Authoritative description, scoring and affected products

26 known exploits for CVE-2022-30525

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2024-02-27 arajsingh-infosecGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2023-01-15 cbk914GITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2023-01-13 VegetaGITEE
Zyxel Firewall SUID Binary Privilege Escalation Exploit
2022-09-02 Martin HeilandZDTRuby
Zyxel Firewall SUID Binary Privilege Escalation
2022-08-31 jbaines-r7, metasploit.comPACKETSTORMRuby
Zyxel Firewall SUID Binary Privilege Escalation
2022-06-14 jbaines-r7METASPLOITRuby
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-06-13 ProngedForkGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-06-12 furkanzenginGITHUB
Zyxel USG FLEX 5.21 - OS Command Injection Exploit
2022-06-03 Valentin LobsteinZDTPython
Zyxel USG FLEX 5.21 Command Injection
2022-06-03 Valentin LobsteinPACKETSTORMPython
Zyxel USG FLEX 5.21 - OS Command Injection
2022-06-03 Valentin LobsteinEXPLOITDBPython
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-28 west9bGITHUB
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
2022-05-28 west9bGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-23 ivereskGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-18 ChocapikkGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-16 superzerosecGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-16 k0sfGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-16 YGoldkingGITHUB
Zyxel Firewall ZTP Unauthenticated Command Injection
2022-05-16 jbaines-r7, metasploit.comPACKETSTORMRuby
Zyxel Firewall ZTP Unauthenticated Command Injection Exploit
2022-05-16 metasploitZDTRuby
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-15 M4fiaB0yGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-13 savior-onlyGITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-13 shuai06GITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-13 Henry4E36GITHUB
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
2022-05-10 jbaines-r7GITHUB
Zyxel Firewall ZTP Unauthenticated Command Injection
2022-04-28 jbaines-r7METASPLOITRuby