CVE-2022-30525

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-05-16

Reference

https://nvd.nist.gov/vuln/detail/CVE-2022-30525

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Players implicated

Zyxel · vendor Multiple Firewalls · product

Description

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.