High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-11	CVE-2022-43390	OS Command Injection vulnerability in Zyxel products A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request. network low complexity zyxel CWE-78	8.8
2022-04-11	CVE-2022-26413	OS Command Injection vulnerability in Zyxel products A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface. low complexity zyxel CWE-78	8.0