zyxel vpn1000 firmware

Name: zyxel vpn1000 firmware
Brand: zyxel

productUS

cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical10high6medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-9054US	critical9.8OT critical	100.0% (100th)	KEV	4.35\(abip.3\)c0	2020-03-04	4.35 → 4.35\(abip.3\)c0
CVE-2022-30525US	critical9.8OT critical	99.9% (100th)	KEV	5.30	2022-05-12	4.60 → 5.30
CVE-2023-28771US	—OT critical	99.3% (100th)	KEV	5.36	2023-04-25	4.60 → 5.36
CVE-2020-29583US	critical9.8OT critical	90.2% (100th)	KEV	no fix	2020-12-22	= 4.60
CVE-2023-33010US	critical9.8OT critical	29.0% (98th)	KEV	5.36	2023-05-24	2 versions
CVE-2023-33009US	—OT critical	28.1% (98th)	KEV	5.36	2023-05-24	2 versions
CVE-2022-30526US	high7.8	1.13% (66th)	Exploit	no fix	2022-07-19	4.30 → 5.30
CVE-2022-0342US	critical9.8	95.1% (100th)	—	5.21	2022-03-28	4.30 → 5.21
CVE-2022-0734US	medium6.1	9.40% (95th)	—	no fix	2022-05-24	4.35 → 5.20
CVE-2022-26531US	high7.8	6.17% (93rd)	—	no fix	2022-05-24	4.30 → 5.21
CVE-2022-26532US	high7.8	4.83% (92nd)	—	no fix	2022-05-24	4.30 → 5.21
CVE-2022-38547US	high7.2	2.83% (87th)	—	no fix	2023-02-07	4.30 → 5.32
CVE-2023-27991US	high8.8	1.45% (73rd)	—	5.36	2023-04-24	4.30 → 5.36
CVE-2022-2030US	medium6.5	1.35% (71st)	—	no fix	2022-07-19	4.30 → 5.30
CVE-2023-22913US	high8.1	1.29% (70th)	—	no fix	2023-04-24	4.50 → 5.35
CVE-2023-22915US	high7.5	1.05% (64th)	—	no fix	2023-04-24	4.50 → 5.35
CVE-2023-22914US	high7.2	1.03% (64th)	—	no fix	2023-04-24	4.50 → 5.35
CVE-2023-22917US	high7.5	0.88% (59th)	—	no fix	2023-04-24	5.00 → 5.35
CVE-2023-22918US	medium6.5	0.77% (55th)	—	5.36	2023-04-24	4.30 → 5.36
CVE-2022-0910US	medium6.5	0.73% (54th)	—	no fix	2022-05-24	4.32 → 5.21
CVE-2023-22916US	high8.1	0.69% (53rd)	—	no fix	2023-04-24	5.00 → 5.35
CVE-2022-40603US	medium6.1	0.39% (33rd)	—	no fix	2022-12-06	4.30 → 5.31
CVE-2023-27990US	medium4.8	0.34% (27th)	—	5.36	2023-04-24	4.30 → 5.36

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-312Cleartext Storage of Sensitive Information1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan