Skip to main content

Vpn100 Firmware CVE-2022-0910

MEDIUM
Improper Authentication (CWE-287)
2022-05-24 security@zyxel.com.tw
Authentication Bypass Zyxel Vpn100 Firmware Vpn1000 Firmware Vpn300 Firmware Vpn50 Firmware Atp100 Firmware Atp100W Firmware Atp200 Firmware Atp500 Firmware Atp700 Firmware Atp800 Firmware Usg 110 Firmware Usg 1100 Firmware Usg 1900 Firmware Usg 20W Firmware Usg 20W Vpn Firmware Usg 2200 Vpn Firmware Usg 310 Firmware Usg 40 Firmware Usg 40W Firmware Usg 60 Firmware Usg 60W Firmware Usg Flex 100 Firmware Usg Flex 100W Firmware Usg Flex 200 Firmware Usg Flex 500 Firmware Usg Flex 700 Firmware Usg200 Firmware Usg20 Firmware Usg210 Firmware Usg2200 Firmware Usg300 Firmware Usg310 Firmware
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
May 24, 2022 - 03:15 nvd
MEDIUM 6.5

DescriptionNVD

A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, and VPN series firmware versions 4.32 through 5.21, that could allow an authenticated attacker to bypass the second authentication phase to connect the IPsec VPN server even though the two-factor authentication (2FA) was enabled.

AnalysisAI

A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, and VPN series firmware versions 4.32 through 5.21, that could allow an authenticated attacker to bypass the second authentication phase to connect the IPsec VPN server even though the two-factor authentication (2FA) was enabled. Affected products include: Zyxel Vpn100 Firmware, Zyxel Vpn1000 Firmware, Zyxel Vpn300 Firmware, Zyxel Vpn50 Firmware, Zyxel Atp100 Firmware. Version information: through 4.71.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Vpn100 Firmware

View all
CVE-2023-28771 CRITICAL POC
9.8 Apr 25

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware vers
CVE-2022-30525 CRITICAL POC
9.8 May 12

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
CVE-2022-0342 CRITICAL POC
9.8 Mar 28

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70
CVE-2020-29583 CRITICAL POC
9.8 Dec 22

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. Rated
CVE-2020-9054 CRITICAL POC
9.8 Mar 04

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command
CVE-2019-9955 MEDIUM POC
6.1 Apr 22

On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, U
CVE-2023-33010 CRITICAL
9.8 May 24

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Pa
CVE-2023-33009 CRITICAL
9.8 May 24

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Pat
CVE-2023-27991 HIGH
8.8 Apr 24

The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 th
CVE-2023-22916 HIGH
8.1 Apr 24

The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00
CVE-2023-22913 HIGH
8.1 Apr 24

A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series
CVE-2022-26532 HIGH
7.8 May 24

A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 t

Same weakness CWE-287 – Improper Authentication

View all
CVE-2020-0688 HIGH POC
8.8
CVE-2023-46805 HIGH POC
8.2
CVE-2015-1187 CRITICAL POC
9.8
CVE-2024-7593 CRITICAL POC
9.8
CVE-2017-7921 CRITICAL POC
9.8
CVE-2024-53704 CRITICAL POC
9.8
CVE-2015-7755 CRITICAL POC
9.8
CVE-2013-0625 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2022-0910 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy