CVE-2022-2030 Path traversal in ATP series firmware
An authenticated attacker can exploit improper URL sanitization in CGI programs to access restricted files on Zyxel USG and ATP series devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-2030?
CVE-2022-2030 is a medium-severity path traversal vulnerability in Zyxel ATP series firmware, published on 19 Jul 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50(W) firmware versions 4.16 through 5.30, USG20(W)-VPN firmware versions 4.16 through 5.30, ATP series firmware versions 4.32 through 5.30, VPN series firmware versions 4.30 through 5.30, USG/ZyWALL series firmware versions 4.11 through 4.72, that could allow an authenticated attacker to access some restricted files on a vulnerable device.
Weakness: CWE-22
Which versions are affected by CVE-2022-2030?
It affects 25 products.
Products include Zyxel Atp100 Firmware, Zyxel Atp100w Firmware, Zyxel Atp200 Firmware, Zyxel Atp500 Firmware, Zyxel Atp700 Firmware, Zyxel Atp800 Firmware and 19 more.
How do I fix CVE-2022-2030?
No fix has been published for CVE-2022-2030 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-2030 being exploited?
There is no known exploitation of CVE-2022-2030 in the wild and no public exploit code.
Other vulnerabilities in Zyxel ATP series firmware
- CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow
- CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow
- CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection
- CVE-2022-30525 Zyxel Multiple Firewalls OS Command Injection
- CVE-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials
Sources
Also known as GHSA-cq2h-7r44-f9vg.