A directory traversal vulnerability caused by specific character sequences within...

6.5 CVSS

Vulnerability Description

A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50(W) firmware versions 4.16 through 5.30, USG20(W)-VPN firmware versions 4.16 through 5.30, ATP series firmware versions 4.32 through 5.30, VPN series firmware versions 4.30 through 5.30, USG/ZyWALL series firmware versions 4.11 through 4.72, that could allow an authenticated attacker to access some restricted files on a vulnerable device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2030

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.zyxel.com/support/Zyxel-security-advisory-authenticated-directory-traversal-vulnerabilities-of-firewalls.shtml

More from Zyxel

View All →

CVE-2025-9133

A missing authorization vulnerability in Zyxel ATP series firmware versions...

High 8.1

CVE-2025-8693

A post-authentication command injection vulnerability in the "priv" parameter of...

High 8.8

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware...

High 7.2

CVE-2025-7673

A buffer overflow vulnerability in the URL parser of the...

Critical 9.8

CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of...

Medium 5.3

Affected Vendor

Zyxel

View all reports →

Affected Software

USG FLEX 100(W) firmware, USG FLEX 200 firmware, USG FLEX 500 firmware, USG FLEX 700 firmware, ATP series firmware, VPN series firmware, USG FLEX 50(W) firmware, USG 20(W)-VPN firmware, USG/ZyWALL series firmware

Vulnerable Versions:

4.50 through 5.30, 4.32 through 5.30, 4.30 through 5.30, 4.16 through 5.30, 4.11 through 4.72