CVE:CVE-2022-38547
CNNVD:CNNVD-202302-487
Zyxel ZyXEL ZyWALL USG是中国合勤（Zyxel）公司的一款网络安全防火墙设备。
Zyxel ZyWALL/USG 4.20至4.72版本、VPN 4.30至5.32版本、USG FLEX 4.50至5.32版本、ATP 4.32至5.32版本存在安全漏洞，该漏洞源于在CLI命令中存在认证后命令注入漏洞， 允许具有管理员权限的经过身份验证的攻击者执行操作系统命令。
solution:Upgrade zyxel atp100_firmware to a higher version than 5.32,and avoid the version [4.32,5.32]; Upgrade zyxel atp200_firmware to a higher version than 5.32,and avoid the version [4.32,5.32]; Upgrade zyxel atp700_firmware to a higher version than 5.32,and avoid the version [4.32,5.32]; Upgrade zyxel atp500_firmware to a higher version than 5.32,and avoid the version [4.32,5.32]; Upgrade zyxel atp100w_firmware to a higher version than 5.32,and avoid the version [4.32,5.32]; Upgrade zyxel atp800_firmware to a higher version than 5.32,and avoid the version [4.32,5.32]; Upgrade zyxel usg_flex_50_firmware to a higher version than 5.32,and avoid the version [4.50,5.32]; Upgrade zyxel usg_flex_200_firmware to a higher version than 5.32,and avoid the version [4.50,5.32]; Upgrade zyxel usg_flex_500_firmware to a higher version than 5.32,and avoid the version [4.50,5.32]; Upgrade zyxel usg_flex_700_firmware to a higher version than 5.32,and avoid the version [4.50,5.32]; Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.32,and avoid the version [4.50,5.32]; Upgrade zyxel usg_flex_100_firmware to a higher version than 5.32,and avoid the version [4.50,5.32]; Upgrade zyxel vpn1000_firmware to a higher version than 5.32,and avoid the version [4.30,5.32]; Upgrade zyxel usg20w-vpn_firmware to a higher version than 5.32,and avoid the version [4.30,5.32]; Upgrade zyxel usg20-vpn_firmware to a higher version than 5.32,and avoid the version [4.30,5.32]; Upgrade zyxel vpn50_firmware to a higher version than 5.32,and avoid the version [4.30,5.32]; Upgrade zyxel vpn300_firmware to a higher version than 5.32,and avoid the version [4.30,5.32]; Upgrade zyxel vpn100_firmware to a higher version than 5.32,and avoid the version [4.30,5.32]; Upgrade zyxel usg40_firmware to a higher version than 4.72,and avoid the version [4.20,4.72]; Upgrade zyxel usg40w_firmware to a higher version than 4.72,and avoid the version [4.20,4.72]; Upgrade zyxel usg60_firmware to a higher version than 4.72,and avoid the version [4.20,4.72]; Upgrade zyxel usg60w_firmware to a higher version than 4.72,and avoid the version [4.20,4.72]; Upgrade zyxel zywall_110_firmware to a higher version than 4.72,and avoid the version [4.20,4.72]; Upgrade zyxel zywall_1100_firmware to a higher version than 4.72,and avoid the version [4.20,4.72]; Upgrade zyxel zywall_310_firmware to a higher version than 4.72,and avoid the version [4.20,4.72]