CVE:CVE-2022-26532
CNNVD:CNNVD-202205-3999
Zyxel USG/ZyWALL是中国合勤科技（Zyxel）公司的一款防火墙。
Zyxel USG/ZyWALL 4.09 - 4.71版本、USG FLEX 4.50 - 5.21版本、ATP 4.32 - 5.21版本、VPN  4.30 - 5.21版本、NSG 1.00 - 1.33版本、NXC2500 6.10(AAIG.3)及之前版本、NAP203 6.25(ABFA.7)及之前版本、NWA50AX 6.25(ABYW.5)及之前版本、WAC500  6.30(ABVS.2) 及之前版本，以及 WAX510D 6.30(ABTF.2) 及之前版本中存在操作系统命令注入漏洞，该漏洞源于 packet-trace CLI 命令中的不正确输入验证， 本地攻击者利用该漏洞可在目标系统上执行任意shell命令。
solution:Upgrade zyxel vpn100_firmware to a higher version than 5.21,and avoid the version [4.30,5.21]; Upgrade zyxel vpn1000_firmware to a higher version than 5.21,and avoid the version [4.30,5.21]; Upgrade zyxel vpn300_firmware to a higher version than 5.21,and avoid the version [4.30,5.21]; Upgrade zyxel vpn50_firmware to a higher version than 5.21,and avoid the version [4.30,5.21]; Upgrade zyxel atp100_firmware to a higher version than 5.21,and avoid the version [4.32,5.21]; Upgrade zyxel atp100w_firmware to a higher version than 5.21,and avoid the version [4.32,5.21]; Upgrade zyxel atp200_firmware to a higher version than 5.21,and avoid the version [4.32,5.21]; Upgrade zyxel atp500_firmware to a higher version than 5.21,and avoid the version [4.32,5.21]; Upgrade zyxel atp700_firmware to a higher version than 5.21,and avoid the version [4.32,5.21]; Upgrade zyxel atp800_firmware to a higher version than 5.21,and avoid the version [4.32,5.21]; Upgrade zyxel usg_110_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_1100_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_1900_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_20w_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_20w-vpn_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_2200-vpn_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_310_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_40_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_40w_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_60_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_60w_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg_flex_100_firmware to a higher version than 5.21,and avoid the version [4.50,5.21]; Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.21,and avoid the version [4.50,5.21]; Upgrade zyxel usg_flex_200_firmware to a higher version than 5.21,and avoid the version [4.50,5.21]; Upgrade zyxel usg_flex_500_firmware to a higher version than 5.21,and avoid the version [4.50,5.21]; Upgrade zyxel usg_flex_700_firmware to a higher version than 5.21,and avoid the version [4.50,5.21]; Upgrade zyxel usg200_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg20_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg210_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg2200_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg300_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel usg310_firmware to a higher version than 4.71,and avoid the version [4.09,4.71]; Upgrade zyxel nsg300_firmware to a higher version than 1.33,1.33,1.33:patch1,1.33:patch2,1.33:patch3,1.33:patch4,and avoid the version [1.00,1.33),1.33,1.33:patch1,1.33:patch2,1.33:patch3,1.33:patch4; Upgrade zyxel nsg100_firmware to a higher version than 1.33,1.33,1.33:patch1,1.33:patch2,1.33:patch3,1.33:patch4,and avoid the version [1.00,1.33),1.33,1.33:patch1,1.33:patch2,1.33:patch3,1.33:patch4; Upgrade zyxel nsg50_firmware to a higher version than 1.33,1.33,1.33:patch1,1.33:patch2,1.33:patch3,1.33:patch4,and avoid the version [1.00,1.33),1.33,1.33:patch1,1.33:patch2,1.33:patch3,1.33:patch4; Upgrade zyxel nxc2500_firmware to a higher version than 6.10\(aaig.3\,and avoid the version (,6.10\(aaig.3\)]; Upgrade zyxel nxc5500_firmware to a higher version than 6.10\(aaos.3\,and avoid the version (,6.10\(aaos.3\)]; Upgrade zyxel nap203_firmware to a higher version than 6.25\(abfa.7\,and avoid the version (,6.25\(abfa.7\)]; Upgrade zyxel nap303_firmware to a higher version than 6.25\(abex.7\,and avoid the version (,6.25\(abex.7\)]; Upgrade zyxel nap353_firmware to a higher version than 6.25\(abey.7\,and avoid the version (,6.25\(abey.7\)]; Upgrade zyxel nwa50ax_firmware to a higher version than 6.25\(abyw.5\,and avoid the version (,6.25\(abyw.5\)]; Upgrade zyxel nwa55axe_firmware to a higher version than 6.25\(abzl.5\,and avoid the version (,6.25\(abzl.5\)]; Upgrade zyxel nwa90ax_firmware to a higher version than 6.27\(accv.2\,and avoid the version (,6.27\(accv.2\)]; Upgrade zyxel nwa110ax_firmware to a higher version than 6.30\(abtg.2\,and avoid the version (,6.30\(abtg.2\)]; Upgrade zyxel nwa210ax_firmware to a higher version than 6.30\(abtd.2\,and avoid the version (,6.30\(abtd.2\)]; Upgrade zyxel nwa1123-ac-hd_firmware to a higher version than 6.25\(abin.6\,and avoid the version (,6.25\(abin.6\)]; Upgrade zyxel nwa1123-ac-pro_firmware to a higher version than 6.25\(abhd.7\,and avoid the version (,6.25\(abhd.7\)]; Upgrade zyxel nwa1123acv3_firmware to a higher version than 6.30\(abvt.2\,and avoid the version (,6.30\(abvt.2\)]; Upgrade zyxel nwa1302-ac_firmware to a higher version than 6.25\(abku.6\,and avoid the version (,6.25\(abku.6\)]; Upgrade zyxel nwa5123-ac-hd_firmware to a higher version than 6.25\(abim.6\,and avoid the version (,6.25\(abim.6\)]; Upgrade zyxel wac500h_firmware to a higher version than 6.30\(abwa.2\,and avoid the version (,6.30\(abwa.2\)]; Upgrade zyxel wac500_firmware to a higher version than 6.30\(abvs.2\,and avoid the version (,6.30\(abvs.2\)]; Upgrade zyxel wac5302d-s_firmware to a higher version than 6.10\(abfh.10\,and avoid the version (,6.10\(abfh.10\)]; Upgrade zyxel wac5302d-sv2_firmware to a higher version than 6.25\(abvz.6\,and avoid the version (,6.25\(abvz.6\)]; Upgrade zyxel wac6103d-i_firmware to a higher version than 6.25\(aaxh.7\,and avoid the version (,6.25\(aaxh.7\)]; Upgrade zyxel wac6303d-s_firmware to a higher version than 6.25\(abgl.6\,and avoid the version (,6.25\(abgl.6\)]; Upgrade zyxel wac6502d-e_firmware to a higher version than 6.25\(aasd.7\,and avoid the version (,6.25\(aasd.7\)]; Upgrade zyxel wac6502d-s_firmware to a higher version than 6.25\(aase.7\,and avoid the version (,6.25\(aase.7\)]; Upgrade zyxel wac6503d-s_firmware to a higher version than 6.25\(aasf.7\,and avoid the version (,6.25\(aasf.7\)]; Upgrade zyxel wac6553d-s_firmware to a higher version than 6.25\(aasg.7\,and avoid the version (,6.25\(aasg.7\)]; Upgrade zyxel wac6552d-s_firmware to a higher version than 6.25\(abio.7\,and avoid the version (,6.25\(abio.7\)]; Upgrade zyxel wax510d_firmware to a higher version than 6.30\(abtf.2\,and avoid the version (,6.30\(abtf.2\)]; Upgrade zyxel wax610d_firmware to a higher version than 6.30\(abte.2\,and avoid the version (,6.30\(abte.2\)]; Upgrade zyxel wax630s_firmware to a higher version than 6.30\(abzd.2\,and avoid the version (,6.30\(abzd.2\)]; Upgrade zyxel wax650s_firmware to a higher version than 6.30\(abrm.2\,and avoid the version (,6.30\(abrm.2\)]