Details of VAR-202302-0865

ID

VAR-202302-0865

CVE

CVE-2022-38547

TITLE

plural Zyxel In the product OS Command injection vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2023-003229

DESCRIPTION

A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72, VPN series firmware versions 4.30 through 5.32, USG FLEX series firmware versions 4.50 through 5.32, and ATP series firmware versions 4.32 through 5.32, which could allow an authenticated attacker with administrator privileges to execute OS commands. plural Zyxel The product has OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2022-38547 // JVNDB: JVNDB-2023-003229 // VULMON: CVE-2022-38547

AFFECTED PRODUCTS

vendor:	zyxel	model:	usg flex 500	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	zywall 110	scope:	gte	version:	4.20	Trust: 1.0
vendor:	zyxel	model:	atp800	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	vpn300	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	atp100w	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	usg40	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	vpn300	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	usg flex 500	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	usg40w	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	atp200	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	vpn100	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	usg40w	scope:	gte	version:	4.20	Trust: 1.0
vendor:	zyxel	model:	zywall 110	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	atp700	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	vpn1000	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	vpn100	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	zywall 1100	scope:	gte	version:	4.20	Trust: 1.0
vendor:	zyxel	model:	usg flex 50	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	usg60	scope:	gte	version:	4.20	Trust: 1.0
vendor:	zyxel	model:	usg20w-vpn	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	atp500	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	usg flex 700	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	usg flex 100	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	vpn1000	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	vpn50	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	vpn50	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	usg20w-vpn	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	zywall 310	scope:	gte	version:	4.20	Trust: 1.0
vendor:	zyxel	model:	atp100	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	atp100w	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	usg flex 50	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	zywall 1100	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	usg flex 200	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	usg flex 100	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	usg60	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	usg60w	scope:	gte	version:	4.20	Trust: 1.0
vendor:	zyxel	model:	usg flex 100w	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	atp800	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	zywall 310	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	atp200	scope:	gte	version:	4.32	Trust: 1.0
vendor:	zyxel	model:	usg40	scope:	gte	version:	4.20	Trust: 1.0
vendor:	zyxel	model:	atp700	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	usg20-vpn	scope:	gte	version:	4.30	Trust: 1.0
vendor:	zyxel	model:	usg flex 700	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	usg flex 200	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	usg20-vpn	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	atp100	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	atp500	scope:	lte	version:	5.32	Trust: 1.0
vendor:	zyxel	model:	usg60w	scope:	lte	version:	4.72	Trust: 1.0
vendor:	zyxel	model:	usg flex 100w	scope:	gte	version:	4.50	Trust: 1.0
vendor:	zyxel	model:	usg flex 200	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg flex 50	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp200	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp700	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp100w	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg flex 500	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp500	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	usg flex 700	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp800	scope:	-	version:	-	Trust: 0.8
vendor:	zyxel	model:	atp100	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2023-003229 // NVD: CVE-2022-38547

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2022-38547
value:	HIGH
Trust: 1.0
security@zyxel.com.tw:	CVE-2022-38547
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2023-003229
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202302-487
value:	HIGH
Trust: 0.6

NVD:
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.2
impactScore:	5.9
version:	3.1
Trust: 2.0
OTHER:	JVNDB-2023-003229
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2023-003229 // NVD: CVE-2022-38547 // NVD: CVE-2022-38547 // CNNVD: CNNVD-202302-487

PROBLEMTYPE DATA

problemtype:	CWE-78	Trust: 1.0
problemtype:	OS Command injection (CWE-78) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2023-003229 // NVD: CVE-2022-38547

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202302-487

TYPE

operating system commend injection

Trust: 0.6

sources: CNNVD: CNNVD-202302-487

CONFIGURATIONS

sources: NVD: CVE-2022-38547

PATCH

title:	Zyxel security advisory for post-authentication RCE in firewalls	url:	https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-rce-in-firewalls	Trust: 0.8
title:	ZyXEL ZyWALL USG Fixes for operating system command injection vulnerabilities	url:	http://123.124.177.30/web/xxk/bdxqbyid.tag?id=225393	Trust: 0.6
title:	-	url:	https://github.com/live-hack-cve/cve-2022-38547	Trust: 0.1

sources: VULMON: CVE-2022-38547 // JVNDB: JVNDB-2023-003229 // CNNVD: CNNVD-202302-487

EXTERNAL IDS

db:	NVD	id:	CVE-2022-38547	Trust: 3.3
db:	JVNDB	id:	JVNDB-2023-003229	Trust: 0.8
db:	CNNVD	id:	CNNVD-202302-487	Trust: 0.6
db:	VULMON	id:	CVE-2022-38547	Trust: 0.1

sources: VULMON: CVE-2022-38547 // JVNDB: JVNDB-2023-003229 // NVD: CVE-2022-38547 // CNNVD: CNNVD-202302-487

REFERENCES

url:	https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-rce-in-firewalls	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-38547	Trust: 0.8
url:	https://cxsecurity.com/cveshow/cve-2022-38547/	Trust: 0.6
url:	https://github.com/live-hack-cve/cve-2022-38547	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2022-38547 // JVNDB: JVNDB-2023-003229 // NVD: CVE-2022-38547 // CNNVD: CNNVD-202302-487

SOURCES

db:	VULMON	id:	CVE-2022-38547
db:	JVNDB	id:	JVNDB-2023-003229
db:	NVD	id:	CVE-2022-38547
db:	CNNVD	id:	CNNVD-202302-487

LAST UPDATE DATE

2023-12-18T13:26:45.600000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2022-38547	date:	2023-02-07T00:00:00
db:	JVNDB	id:	JVNDB-2023-003229	date:	2023-09-05T05:07:00
db:	NVD	id:	CVE-2022-38547	date:	2023-02-14T23:45:41.760
db:	CNNVD	id:	CNNVD-202302-487	date:	2023-02-15T00:00:00

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2022-38547	date:	2023-02-07T00:00:00
db:	JVNDB	id:	JVNDB-2023-003229	date:	2023-09-05T00:00:00
db:	NVD	id:	CVE-2022-38547	date:	2023-02-07T02:15:07.883
db:	CNNVD	id:	CNNVD-202302-487	date:	2023-02-07T00:00:00