CVE-2020-29299

Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator before SD-OS V10.03 week32, USG before ZLD V4.39 week38, USG FLEX before ZLD V4.55 week38, ATP before ZLD V4.55 week38, and NSG before 1.33 patch 4.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:zyxel:vpn_orchestrator:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_flex:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:atp:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:zyxel:nsg_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nsg_firmware:1.33:-:*:*:*:*:*:*
cpe:2.3:o:zyxel:nsg_firmware:1.33:patch1:*:*:*:*:*:*
cpe:2.3:h:zyxel:nsg:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:zyxel:usg_flex_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_flex:-:*:*:*:*:*:*:*

History

05 Jan 2021, 14:47

Type Values Removed Values Added
References (MISC) https://www.zyxel.com/support/Zyxel-security-advisory-for-command-injection-vulnerability-of-firewalls.shtml - (MISC) https://www.zyxel.com/support/Zyxel-security-advisory-for-command-injection-vulnerability-of-firewalls.shtml - Vendor Advisory
References (MISC) https://www.zyxel.com/us/en/support/security_advisories.shtml - (MISC) https://www.zyxel.com/us/en/support/security_advisories.shtml - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 9.0
v3 : 7.2
CWE CWE-77
CPE cpe:2.3:h:zyxel:usg_flex:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:usg_flex_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nsg_firmware:1.33:-:*:*:*:*:*:*
cpe:2.3:h:zyxel:nsg:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nsg_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nsg_firmware:1.33:patch1:*:*:*:*:*:*
cpe:2.3:o:zyxel:vpn_orchestrator:*:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:atp:-:*:*:*:*:*:*:*

Information

Published : 2020-12-27 06:15

Updated : 2023-12-10 13:41


NVD link : CVE-2020-29299

Mitre link : CVE-2020-29299

CVE.ORG link : CVE-2020-29299


JSON object : View

Products Affected

zyxel

  • zld
  • vpn_orchestrator
  • usg_flex
  • nsg
  • nsg_firmware
  • usg_flex_firmware
  • atp
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')