Zyxel 防火墙 CVE-2022-30525 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/west9b/CVE-2022-30525
• https://www.zyxel.com/tw/zh/support/security-advisories/zyxel-security-advisory-for-os-command-injection-vulnerability-of-firewalls
• https://www.rapid7.com/blog/post/2022/05/12/cve-2022-30525-fixed-zyxel-firewall-unauthenticated-remote-command-injection/
• https://www.ithome.com.tw/news/150938
• https://cve.imfht.com/detail/CVE-2022-30525
• https://nvd.nist.gov/vuln/detail/cve-2022-30525
• https://www.venustech.com.cn/new_type/aqtg/20220513/23861.html
• https://github.com/Henry4E36/CVE-2022-30525
• https://www.secpulse.com/archives/179462.html
• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-os-command-injection-vulnerability-of-firewalls

Related Vulnerabilities

• Zyxel Keenetic路由器存在未授权访问漏洞
• PoCCVE-2018-19326: Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion
• PoCCVE-2019-12581: Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting
• PoCCVE-2019-12583: Zyxel ZyWall UAG/USG - Account Creation Access
• PoCCVE-2019-9955: Zyxel - Cross-Site Scripting
• PoCCVE-2020-29583: ZyXel USG - Hardcoded Credentials
• PoCCVE-2020-9054: Zyxel NAS Firmware 5.21- Remote Code Execution
• PoCCVE-2021-3297: Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass
• PoCCVE-2021-46387: Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting
• PoCCVE-2022-0342: Zyxel - Authentication Bypass
• PoCCVE-2022-30525: Zyxel Firewall - OS Command Injection
• PoCCVE-2024-29972: Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account
• PoCCVE-2024-29973: Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - Command Injection