CVE-2022-30525: Zyxel Multiple Firewalls OS Command Injection
Zyxel Multiple Firewalls OS Command Injection Vulnerability. A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.
- CISA KEV-listed (remediation due 2022-06-06)
- EPSS 99.9% (100.0% percentile)
- CVSS 9.8 critical