Exploit

CVE-2022-30526

Improper Privilege Management (CWE-269)

Published: Jul 19, 2022 / Updated: 28mo ago

Zyxel has released patches for products affected by local privilege escalation and authenticated directory traversal vulnerabilities. A privilege escalation vulnerability was identified in the CLI command of some firewall versions that could allow a local attacker to execute some OS commands with root privileges in some directories on a vulnerable device.

Rapid7 discovered a local privilege escalation vulnerability affecting Zyxel firewalls. The vulnerability allows a low privileged user, such as, to escalate to on affected firewalls.

Rapid7 discovered a local privilege escalation vulnerability affecting Zyxel firewalls. The vulnerability allows a low privileged user, such as, to escalate to on affected firewalls.

The ability of the government and enterprise to be more agile in cyber security response is going to be critical, because one of the biggest challenges facing the security industry is not just the variety of attacks or their raw numbers, but also just how quickly malicious actors and their threats can operate. In order to develop policies and practices that mitigate the risk of faster time to exploitation, security practitioners need not only detailed guidance, but also the “why” behind it — and that means vulnerability details, delivered transparently, in ways accessible to security teams and researchers.”

"CVE-2022-30526 (Fixed): Zyxel Firewall Local Privilege Escalation" #redteam #infosec #pentest rapid7.com/blog/post/2022/07…

CVE Id : CVE-2022-30526 Published Date: 2022-12-13T15:38:00+00:00 A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50(W) firmware versions 4.16 through 5.30, USG20(W)-VPN firmware versions 4.16 through 5.30, ATP series firmware versions 4.32 through 5.30, VPN series firmware versions 4.30 through 5.30, USG/ZyWALL series firmware versions 4.09 through 4.72, which could allow a local attacker to execute some OS commands with root privileges in some directories on a vulnerable device. inTheWild added a link to an exploit: http://packetstormsecurity.com/files/168202/Zyxel-Firewall-SUID-Binary-Privilege-Escalation.html

https://www.zyxel.com/support/Zyxel-security-advisory-authenticated-directory-traversal-vulnerabilities-of-firewalls.shtml No Types Assigned https://www.zyxel.com/support/Zyxel-security-advisory-authenticated-directory-traversal-vulnerabilities-of-firewalls.shtml Vendor Advisory

“A format string vulnerability was found in a specific binary of Zyxel NAS products that could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet,” the company said in an advisory released on September 6. Networking equipment maker Zyxel has released patches for a critical security flaw impacting its network-attached storage (NAS) devices.