Cve-2022-30525 vulnerability recurrence

This article is only for study , It is strictly forbidden to use it for illegal purposes , Otherwise, we will be responsible for the consequences .

CVE-2022-30525

Vulnerability profile

2022 year 5 month 12 Japan ,Zyxel（ Heqin ） Issue safety bulletins , Fixed the unauthenticated remote command injection vulnerability in its firewall device （CVE-2022-30525）, Of the vulnerability CVSS The score is 9.8.

The flaw lies in some Zyxel Firewall version CGI In the program , Allow unauthenticated on affected devices nobody Execute arbitrary command as user .

At present, the details of the vulnerability have been publicly disclosed , And accordingly Metasploit The module has been released , Successful use can realize file modification and operating system command execution , To gain initial access to the network and realize horizontal movement to the internal system .

Holes affect

Affected models	Affected firmware version	Patch version
USG FLEX 100(W)、200、500、700	ZLD V5.00 -ZLD V5.21 Patch 1	ZLD V5.30
USG FLEX 50(W) / USG20(W)-VPN	ZLD V5.10 - ZLD V5.21 Patch 1	ZLD V5.30
ATP series	ZLD V5.10 - ZLD V5.21 Patch 1	ZLD V5.30
VPN series	ZLD V4.60 - ZLD V5.21 Patch 1	ZLD V5.30

Bug repair

at present Zyxel This vulnerability has been fixed ÿ