Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

CVE-2022-30525

githubexploit · 2022-05-18

Description

Exploit for OS command injection in Zyxel Flex 100W firmware.

Entry point

Parametercommand · request body

Pathztp/cgi-bin/handler

OS command injection via ztp/cgi-bin/handler allowing execution of arbitrary shell commands

Affected Zyxel Usg Flex 100w Firmware versions

Zyxel Usg Flex 100w Firmware< 5.30

All known vulnerabilities by product

Zyxel Atp Series Zyxel Usg Flex 100 Zyxel Usg Flex 200 Zyxel Usg Flex 50 Zyxel Usg Flex 500 Zyxel Usg Flex 700 Zyxel Usg20(W)-Vpn Zyxel Vpn Series

CVSS 10.0 for CVE-2022-30525

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

94%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-08-14

Exploit Details

Modified:2026-06-22 14:05

Last Seen:2026-07-03 05:22

Reporter:Chocapikk

Repository:No longer on GitHub

Other exploits for CVE-2022-30525

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2024-02-27 arajsingh-infosecGITHUB

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2023-01-15 cbk914GITHUB

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2023-01-13 VegetaGITEE

Zyxel Firewall SUID Binary Privilege Escalation Exploit

2022-09-02 Martin HeilandZDTRuby

Zyxel Firewall SUID Binary Privilege Escalation

2022-08-31 jbaines-r7, metasploit.comPACKETSTORMRuby

Zyxel Firewall SUID Binary Privilege Escalation

2022-06-14 jbaines-r7METASPLOITRuby

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2022-06-13 ProngedForkGITHUB

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

2022-06-12 furkanzenginGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=94507F8A-2436-5A65-B450-40F9E635FD22
No description provided

Exploit Code

Share

Share on social media: