USG Flex 700 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2021-07-02	CVE-2021-35029	Improper Authentication vulnerability in Zyxel products An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device. network low complexity zyxel CWE-287 critical	9.8
2020-12-22	CVE-2020-29583	Insufficiently Protected Credentials vulnerability in Zyxel products Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. network low complexity zyxel CWE-522 critical	9.8