zyxel zywall vpn2s firmware

Name: zyxel zywall vpn2s firmware
Brand: zyxel

productUS

cpe:2.3:o:zyxel:zywall_vpn2s_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical3high0medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-33012US	—	9.88% (96th)	Exploit	5.37	2023-07-17	5.00 → 5.37
CVE-2021-35027US	high7.5	2.04% (81st)	—	no fix	2021-09-29	= 1.12(abln.0)c0
CVE-2023-34139US	high8.8	0.76% (55th)	—	5.37	2023-07-17	4.20 → 5.37
CVE-2023-34141US	—	0.68% (52nd)	—	5.37	2023-07-17	5.00 → 5.37
CVE-2023-34138US	—	0.68% (52nd)	—	5.37	2023-07-17	4.60 → 5.37
CVE-2023-28767US	—	0.40% (35th)	—	5.37	2023-07-17	5.00 → 5.37
CVE-2023-33011US	—	0.34% (27th)	—	5.37	2023-07-17	5.00 → 5.37
CVE-2021-35028US	high7.8	0.30% (23rd)	—	no fix	2021-09-29	= 1.12(abln.0)c0
CVE-2023-34140US	—	0.30% (23rd)	—	5.37	2023-07-17	4.30 → 5.37

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-134Use of Externally-Controlled Format String1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-27Path Traversal: 'dir/../../filename'1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.