CVE-2022-30526 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2022-30526

Analyzed

More Info Official Page

Source-security@zyxel.com.tw

Published At-19 Jul, 2022 | 06:15

Updated At-13 Dec, 2022 | 15:38

A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50(W) firmware versions 4.16 through 5.30, USG20(W)-VPN firmware versions 4.16 through 5.30, ATP series firmware versions 4.32 through 5.30, VPN series firmware versions 4.30 through 5.30, USG/ZyWALL series firmware versions 4.09 through 4.72, which could allow a local attacker to execute some OS commands with root privileges in some directories on a vulnerable device.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Zyxel Networks Corporation

>>usg_flex_100w_firmware>>Versions from 4.50(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_100w>>-

cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_200_firmware>>Versions from 4.50(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_200>>-

cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_500_firmware>>Versions from 4.50(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_500>>-

cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_700_firmware>>Versions from 4.50(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_700>>-

cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_50w_firmware>>Versions from 4.16(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_flex_50w>>-

cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg20w-vpn_firmware>>Versions from 4.16(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:usg20w-vpn_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg20w-vpn>>-

cpe:2.3:h:zyxel:usg20w-vpn:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>atp800_firmware>>Versions from 4.32(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>atp700_firmware>>Versions from 4.32(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>atp500_firmware>>Versions from 4.32(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>atp200_firmware>>Versions from 4.32(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>atp100w_firmware>>Versions from 4.32(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>atp100_firmware>>Versions from 4.32(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>vpn1000_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>vpn300_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>vpn100_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>vpn50_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>vpn50>>-

cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg20-vpn_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:usg20-vpn:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_2200-vpn_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:usg_2200-vpn_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg_2200-vpn>>-

cpe:2.3:h:zyxel:usg_2200-vpn:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zywall_110_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:zywall_110_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zywall_110>>-

cpe:2.3:h:zyxel:zywall_110:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zywall_310_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:zywall_310_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zywall_310>>-

cpe:2.3:h:zyxel:zywall_310:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zywall_1100_firmware>>Versions from 4.30(inclusive) to 5.30(inclusive)

cpe:2.3:o:zyxel:zywall_1100_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>zywall_1100>>-

cpe:2.3:h:zyxel:zywall_1100:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg40_firmware>>Versions from 4.09(inclusive) to 4.72(inclusive)

cpe:2.3:o:zyxel:usg40_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg40>>-

cpe:2.3:h:zyxel:usg40:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg40w_firmware>>Versions from 4.09(inclusive) to 4.72(inclusive)

cpe:2.3:o:zyxel:usg40w_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:usg40w:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg60_firmware>>Versions from 4.09(inclusive) to 4.72(inclusive)

cpe:2.3:o:zyxel:usg60_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg60>>-

cpe:2.3:h:zyxel:usg60:-:*:*:*:*:*:*:*

Zyxel Networks Corporation

>>usg60w_firmware>>Versions from 4.09(inclusive) to 4.72(inclusive)

cpe:2.3:o:zyxel:usg60w_firmware:*:*:*:*:*:*:*:*

Zyxel Networks Corporation

cpe:2.3:h:zyxel:usg60w:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-269	Primary	nvd@nist.gov
CWE-269	Secondary	security@zyxel.com.tw

CWE ID: CWE-269

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-269

Type: Secondary

Source: security@zyxel.com.tw

References

Hyperlink	Source	Resource
http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html	security@zyxel.com.tw	Exploit Third Party Advisory VDB Entry
https://www.zyxel.com/support/Zyxel-security-advisory-authenticated-directory-traversal-vulnerabilities-of-firewalls.shtml	security@zyxel.com.tw	Vendor Advisory

Hyperlink: http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html

Source: security@zyxel.com.tw

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: https://www.zyxel.com/support/Zyxel-security-advisory-authenticated-directory-traversal-vulnerabilities-of-firewalls.shtml

Source: security@zyxel.com.tw

Resource:

Vendor Advisory