CVE:CVE-2022-40603
CNNVD:CNNVD-202212-2533
Zyxel USG/ZyWALL是中国合勤（Zyxel）公司的一款防火墙。
Zyxel USG/ZyWALL V4.73之前版本、VPN V5.32之前版本、USG FLEX V5.32之前版本、ATP V5.32之前版本存在安全漏洞，该漏洞源于CGI程序存在跨站脚本(XSS)漏洞，这可能允许攻击者诱骗用户访问带有XSS负载的特制URL，如果在受害者的浏览器上执行恶意脚本，攻击者就可以访问一些基于浏览器的信息。
solution:Upgrade zyxel atp800_firmware to a higher version than 5.31,and avoid the version [4.32,5.31]; Upgrade zyxel atp700_firmware to a higher version than 5.31,and avoid the version [4.32,5.31]; Upgrade zyxel atp500_firmware to a higher version than 5.31,and avoid the version [4.32,5.31]; Upgrade zyxel atp200_firmware to a higher version than 5.31,and avoid the version [4.32,5.31]; Upgrade zyxel atp100_firmware to a higher version than 5.31,and avoid the version [4.32,5.31]; Upgrade zyxel atp100w_firmware to a higher version than 5.31,and avoid the version [4.32,5.31]; Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.31,and avoid the version [4.50,5.31]; Upgrade zyxel usg_flex_200_firmware to a higher version than 5.31,and avoid the version [4.50,5.31]; Upgrade zyxel usg_flex_500_firmware to a higher version than 5.31,and avoid the version [4.50,5.31]; Upgrade zyxel usg_flex_700_firmware to a higher version than 5.31,and avoid the version [4.50,5.31]; Upgrade zyxel usg_flex_50w_firmware to a higher version than 5.31,and avoid the version [4.50,5.31]; Upgrade zyxel vpn1000_firmware to a higher version than 5.31,and avoid the version [4.30,5.31]; Upgrade zyxel vpn300_firmware to a higher version than 5.31,and avoid the version [4.30,5.31]; Upgrade zyxel vpn100_firmware to a higher version than 5.31,and avoid the version [4.30,5.31]; Upgrade zyxel vpn50_firmware to a higher version than 5.31,and avoid the version [4.30,5.31]; Upgrade zyxel usg40_firmware to a higher version than 4.72,and avoid the version [4.30,4.72]; Upgrade zyxel usg40w_firmware to a higher version than 4.72,and avoid the version [4.30,4.72]; Upgrade zyxel usg60_firmware to a higher version than 4.72,and avoid the version [4.30,4.72]; Upgrade zyxel usg60w_firmware to a higher version than 4.72,and avoid the version [4.30,4.72]