CVE-2022-0342 - CVE House
Back to Database
Status published Critical CVE-2022-0342

An authentication bypass vulnerability in the CGI program of Zyxel...

Vulnerability Description

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-0342

Credits & Attribution

No credits recorded in the NVD database.

References

More from Zyxel

View All →
CVE-2025-9133
A missing authorization vulnerability in Zyxel ATP series firmware versions...
High 8.1
CVE-2025-8693
A post-authentication command injection vulnerability in the "priv" parameter of...
High 8.8
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware...
High 7.2
CVE-2025-7673
A buffer overflow vulnerability in the URL parser of the...
Critical 9.8
CVE-2025-6599
An uncontrolled resource consumption vulnerability in the web server of...
Medium 5.3

Affected Vendor

Affected Software

USG/ZyWALL series firmware, USG FLEX series firmware, ATP series firmware, VPN series firmware, NSG series firmware
Vulnerable Versions:
4.20 through 4.70, 4.50 through 5.20, 4.32 through 5.20, 4.30 through 5.20, 1.20 through 1.33 Patch 4

Timeline

Official Publish: March 28th, 2022
Last Modified: August 2nd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-287

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1556 Modify Authentication Process
Credential Access