CVE-2021-35027

Wednesday, September 29, 2021

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.

Affected Software

Vendor	Product	Version Range	Status
Zyxel	ZyWALL VPN2S Firmware	`1.12(ABLN.0)C0`	affected

Weaknesses

CWE-27: CWE-27: Path Traversal: 'dir/../../filename'

ADP Enrichment

CVE Program Container

Additional References

https://www.zyxel.com/support/Zyxel_security_advisory_for_directory_traversal_and_command_injection_vulnerabilities_of_VPN2S_Firewall.shtml

References

https://www.zyxel.com/support/Zyxel_security_advisory_for_directory_traversal_and_command_injection_vulnerabilities_of_VPN2S_Firewall.shtml

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.

←Previous
Next→