Exploit for CVE-2022-30525

kitploit · 2026-09-08

Description

Remote command injection vulnerability in Zyxel Firewall (CVE-2022-30525).

Affected Zyxel Usg Flex 100w Firmware versions

Zyxel Usg Flex 100w Firmware< 5.30

All known vulnerabilities by product

Zyxel Atp Series Zyxel Usg Flex 100 Zyxel Usg Flex 200 Zyxel Usg Flex 50 Zyxel Usg Flex 500 Zyxel Usg Flex 700 Zyxel Usg20(W)-Vpn Zyxel Vpn Series

CVSS 10.0 for CVE-2022-30525

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-09-11

CVE Information

Exploit Details

Modified:2026-09-08 23:13

Last Seen:2026-09-09 02:35

Reporter:KitPloit

Tags

Zyxel FirewallRemote Command InjectionDetection ScriptMass Detection

Other exploits for CVE-2022-30525

2026-09-11 KitPloitKITPLOIT

CVE-2022-30525_check

2026-09-11 KitPloitKITPLOIT

2026-09-11 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

victorian_machinery

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

CVE-2022-30525_Exploit

2026-09-10 KitPloitKITPLOIT

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SHUAI06-CVE-2022-30525
# CVE-2022-30525

Zyxel firewall remote command injection vulnerability (CVE-2022-30525) batch detection script

> The script only provides testing functionality, does not contain actual attack requests, and is only for security detection. All behaviors of using the script for illegal testing are unrelated to the author.

![](https://assets.kitploit.com/production/public/readmes/32544/2f58affa958303dbc802f2b3b4c0cb95dc1650bbe390999967c2d37bcfab0435.jpg)

![](https://assets.kitploit.com/production/public/readmes/32544/2435a587db52111553c3a078c246152f778132ca7fb4524af1b57a1d60fe9fc3.jpg)