CVE-2021-35029

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device.

• zyxel usg1900 firmware (>= 4.35 <= 4.64) • zyxel usg1100 firmware (>= 4.35 <= 4.64) • zyxel usg310 firmware (>= 4.35 <= 4.64) • zyxel usg210 firmware (>= 4.35 <= 4.64) • zyxel usg110 firmware (>= 4.35 <= 4.64) • zyxel usg40 firmware (>= 4.35 <= 4.64) • zyxel usg40w firmware (>= 4.35 <= 4.64) • zyxel usg60 firmware (>= 4.35 <= 4.64) • zyxel usg60w firmware (>= 4.35 <= 4.64) • zyxel usg300 firmware (>= 4.35 <= 4.64) • zyxel usg1000 firmware (>= 4.35 <= 4.64) • zyxel usg2000 firmware (>= 4.35 <= 4.64) • zyxel usg20 firmware (>= 4.35 <= 4.64) • zyxel usg20w firmware (>= 4.35 <= 4.64) • zyxel usg50 firmware (>= 4.35 <= 4.64) • zyxel usg100 firmware (>= 4.35 <= 4.64) • zyxel usg200 firmware (>= 4.35 <= 4.64) • zyxel usg flex 100 firmware (>= 4.35 <= 5.01) • zyxel usg flex 200 firmware (>= 4.35 <= 5.01) • zyxel usg flex 500 firmware (>= 4.35 <= 5.01) • zyxel usg flex 100w firmware (>= 4.35 <= 5.01) • zyxel usg flex 700 firmware (>= 4.35 <= 5.01) • zyxel zywall atp100 firmware (>= 4.35 <= 5.01) • zyxel zywall atp100w firmware (>= 4.35 <= 5.01) • zyxel zywall atp200 firmware (>= 4.35 <= 5.01) • zyxel zywall atp500 firmware (>= 4.35 <= 5.01) • zyxel zywall atp700 firmware (>= 4.35 <= 5.01) • zyxel zywall atp800 firmware (>= 4.35 <= 5.01) • zyxel zywall vpn50 firmware (>= 4.35 <= 5.01) • zyxel zywall vpn100 firmware (>= 4.35 <= 5.01) • zyxel zywall vpn300 firmware (>= 4.35 <= 5.01) • zyxel usg20-vpn firmware (>= 4.35 <= 5.01) • zyxel usg20w-vpn firmware (>= 4.35 <= 5.01) • zyxel usg2200-vpn firmware (>= 4.35 <= 5.01) • zyxel zywall 110 firmware (>= 4.35 <= 5.01) • zyxel zywall 310 firmware (>= 4.35 <= 5.01) • zyxel zywall 1100 firmware (>= 4.35 <= 5.01)