exploit/linux/http/zyxel_ztp_rce

weaponized

Zyxel Firewall ZTP Unauthenticated Command Injection

view exploit source metasploittype exploitpublished 2022-04-28catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-30525US	critical9.8OT critical	99.9% (100th)	KEV	2022-05-12
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.