Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

githubexploit · 2022-05-13

Description

Zyxel Usg Flex 100W Firmware OS Command Injection CVE-2022-3052

Entry point

Parametercommand · request body

Pathztp/cgi-bin/handler

OS command injection via ztp/cgi-bin/handler allowing execution of arbitrary shell commands

Affected Zyxel Usg Flex 100w Firmware versions

Zyxel Usg Flex 100w Firmware< 5.30

All known vulnerabilities by product

Zyxel Atp Series Zyxel Usg Flex 100 Zyxel Usg Flex 200 Zyxel Usg Flex 50 Zyxel Usg Flex 500 Zyxel Usg Flex 700 Zyxel Usg20(W)-Vpn Zyxel Vpn Series

CVSS 10.0 for CVE-2022-30525

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

97%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-07-30

Exploit Details

Modified:2024-12-09 01:44

Last Seen:2025-08-31 21:20

Reporter:shuai06

Written in:Python

Last commit:2022-05-13

Tags

zyxelusg flex 100wfirmwareos command injectionCVE-2022-30525securityexploit

Other exploits for CVE-2022-30525

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2024-02-27 arajsingh-infosecGITHUB

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2023-01-15 cbk914GITHUB

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2023-01-13 VegetaGITEE

Zyxel Firewall SUID Binary Privilege Escalation Exploit

2022-09-02 Martin HeilandZDTRuby

Zyxel Firewall SUID Binary Privilege Escalation

2022-08-31 jbaines-r7, metasploit.comPACKETSTORMRuby

Zyxel Firewall SUID Binary Privilege Escalation

2022-06-14 jbaines-r7METASPLOITRuby

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2022-06-13 ProngedForkGITHUB

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2022-06-12 furkanzenginGITHUB

Exploit Code

README8 lines

## https://sploitus.com/exploit?id=4504BF56-50B9-5F14-BA98-57209CC80328
# CVE-2022-30525  
Zyxel firewall remote command injection vulnerability (CVE-2022-30525) – Batch detection script  
>The script only provides testing functions; it does not contain actual attack requests. It is used solely for security checks. Any illegal tests using this script have nothing to do with me.  

![](https://tva1.sinaimg.cn/large/e6c9d24ely1h274kbmig8j21yc0dyjti.jpg)  

![](https://tva1.sinaimg.cn/large/e6c9d24ely1h274q3zr04j21v40i20vf.jpg)