4.35

DATE	CVE	VULNERABILITY TITLE	RISK
2021-07-02	CVE-2021-35029	Improper Authentication vulnerability in Zyxel products An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected device. network low complexity zyxel CWE-287 critical	9.8
2020-03-04	CVE-2020-9054	OS Command Injection vulnerability in Zyxel products Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. network low complexity zyxel CWE-78 critical	9.8