CVE:CVE-2022-0342
CNNVD:CNNVD-202203-2311
Zyxel USG/ZyWALL是中国合勤科技（Zyxel）公司的一款防火墙。
Zyxel USG/ZyWALL 4.20版本至4.70版本、USG FLEX 4.50版本至5.20版本、ATP 4.32版本至5.20版本、VPN 4.30版本至5.20版本、NSG 1.20版本至1.33 Patch 4版本存在安全漏洞，攻击者利用该漏洞绕过Web身份验证并获得设备的管理访问权限。
solution:Upgrade zyxel usg40_firmware to a higher version than 4.71,and avoid the version [4.20,4.71); Upgrade zyxel usg40w_firmware to a higher version than 4.71,and avoid the version [4.20,4.71); Upgrade zyxel usg60_firmware to a higher version than 4.71,and avoid the version [4.20,4.71); Upgrade zyxel usg60w_firmware to a higher version than 4.71,and avoid the version [4.20,4.71); Upgrade zyxel zywall_110_firmware to a higher version than 4.71,and avoid the version [4.20,4.71); Upgrade zyxel zywall_310_firmware to a higher version than 4.71,and avoid the version [4.20,4.71); Upgrade zyxel zywall_1100_firmware to a higher version than 4.71,and avoid the version [4.20,4.71); Upgrade zyxel usg_flex_100_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg_flex_200_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg_flex_500_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg_flex_700_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel atp100_firmware to a higher version than 5.20,and avoid the version [4.32,5.20]; Upgrade zyxel atp100w_firmware to a higher version than 5.20,and avoid the version [4.32,5.20]; Upgrade zyxel atp200_firmware to a higher version than 5.20,and avoid the version [4.32,5.20]; Upgrade zyxel atp500_firmware to a higher version than 5.20,and avoid the version [4.32,5.20]; Upgrade zyxel atp700_firmware to a higher version than 5.20,and avoid the version [4.32,5.20]; Upgrade zyxel atp800_firmware to a higher version than 5.20,and avoid the version [4.32,5.20]; Upgrade zyxel vpn50_firmware to a higher version than 5.21,and avoid the version [4.30,5.21); Upgrade zyxel vpn100_firmware to a higher version than 5.21,and avoid the version [4.30,5.21); Upgrade zyxel vpn300_firmware to a higher version than 5.21,and avoid the version [4.30,5.21); Upgrade zyxel vpn1000_firmware to a higher version than 5.21,and avoid the version [4.30,5.21); Upgrade zyxel nsg300_firmware to a higher version than 1.33,1.33,1.33:p4,and avoid the version [1.20,1.33),1.33,1.33:p4