{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-12T18:04:53.482","vulnerabilities":[{"cve":{"id":"CVE-2022-40603","sourceIdentifier":"security@zyxel.com.tw","published":"2022-12-06T02:15:09.730","lastModified":"2024-11-21T07:21:42.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG FLEX series firmware versions 4.50 through 5.31, and ATP series firmware versions 4.32 through 5.31, which could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. Then, the attacker could gain access to some browser-based information if the malicious script is executed on the victim’s browser."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) en el programa CGI de las versiones de firmware de la serie Zyxel ZyWALL/USG 4.30 a 4.72, versiones de firmware de la serie VPN 4.30 a 5.31, versiones de firmware de la serie USG FLEX 4.50 a 5.31 y versiones de firmware de la serie ATP 4.32 a 5.31. , lo que podría permitir a un atacante engañar a un usuario para que visite una URL manipulada con el payload XSS. Luego, el atacante podría obtener acceso a cierta información basada en el navegador si el script malicioso se ejecuta en el navegador de la víctima."}],"metrics":{"cvssMetricV31":[{"source":"security@zyxel.com.tw","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}]},"weaknesses":[{"source":"security@zyxel.com.tw","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.32","versionEndIncluding":"5.31","matchCriteriaId":"2198362A-9AED-4264-B7B2-0893B7E373D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*","matchCriteriaId":"66B99746-0589-46E6-9CBD-F38619AD97DC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.32","versionEndIncluding":"5.31","matchCriteriaId":"2BB5BC64-7842-48F3-A4CE-14C01C8B20E1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*","matchCriteriaId":"0B41F437-855B-4490-8011-DF59887BE6D5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.32","versionEndIncluding":"5.31","matchCriteriaId":"0026B391-B6C1-44EA-8199-A64915A9DB2B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*","matchCriteriaId":"2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.32","versionEndIncluding":"5.31","matchCriteriaId":"26D9FD76-F27D-47F2-8037-E6640436DE16"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*","matchCriteriaId":"D68A36FF-8CAF-401C-9F18-94F3A2405CF4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.32","versionEndIncluding":"5.31","matchCriteriaId":"316FF7FF-C4EC-4689-8A7A-F8E0AACE90C0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*","matchCriteriaId":"7F7654A1-3806-41C7-82D4-46B0CD7EE53B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.32","versionEndIncluding":"5.31","matchCriteriaId":"310253F5-731A-480E-858E-4971A50FD30F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*","matchCriteriaId":"47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.50","versionEndIncluding":"5.31","matchCriteriaId":"E3C10EB0-D5E7-49C6-AB34-0F06ACE6A6D9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*","matchCriteriaId":"D74ABA7E-AA78-4A13-A64E-C44021591B42"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.50","versionEndIncluding":"5.31","matchCriteriaId":"05A89511-5802-4C64-B198-5004C9167D12"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*","matchCriteriaId":"F93B6A06-2951-46D2-A7E1-103D7318D612"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.50","versionEndIncluding":"5.31","matchCriteriaId":"909D4080-2BB9-4B53-B8B4-1CDBBF168BDE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*","matchCriteriaId":"92C697A5-D1D3-4FF0-9C43-D27B18181958"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.50","versionEndIncluding":"5.31","matchCriteriaId":"C8BE4D6D-178F-41D1-A502-18CF46DD9F3C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*","matchCriteriaId":"9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.50","versionEndIncluding":"5.31","matchCriteriaId":"09CE942E-29AB-4CE7-8A88-1E68EAA40DA5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*","matchCriteriaId":"110A1CA4-0170-4834-8281-0A3E14FC5584"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.30","versionEndIncluding":"5.31","matchCriteriaId":"C0D78DFF-8DB8-4B05-B1B3-1D17C4424C04"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*","matchCriteriaId":"EECD311A-4E96-4576-AADF-47291EDE3559"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.30","versionEndIncluding":"5.31","matchCriteriaId":"476C3FC7-631B-4F02-851F-85E984A34590"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*","matchCriteriaId":"3C45C303-1A95-4245-B242-3AB9B9106CD4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.30","versionEndIncluding":"5.31","matchCriteriaId":"D5AB0BB4-35C0-41DA-90B3-07AE3E42FB38"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*","matchCriteriaId":"81D90A7B-174F-40A1-8AF4-08B15B7BAC40"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.30","versionEndIncluding":"5.31","matchCriteriaId":"8A256426-E5C9-45B6-993B-835D36138790"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*","matchCriteriaId":"9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg40_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.30","versionEndIncluding":"4.72","matchCriteriaId":"3AF32D67-EAFA-415E-AC6D-6E8E840D700D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg40:-:*:*:*:*:*:*:*","matchCriteriaId":"5CCD2777-CC85-4BAA-B16B-19C2DB8DB742"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg40w_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.30","versionEndIncluding":"4.72","matchCriteriaId":"9427EA8C-A1AD-45CA-B601-A592A6A25F0B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg40w:-:*:*:*:*:*:*:*","matchCriteriaId":"0906F3FA-793B-421D-B957-7E9C18C1AEC0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg60_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.30","versionEndIncluding":"4.72","matchCriteriaId":"C9526A60-BE21-40D1-BA36-3A146568CE54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg60:-:*:*:*:*:*:*:*","matchCriteriaId":"26900300-1325-4C8A-BC3B-A10233B2462A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:usg60w_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.30","versionEndIncluding":"4.72","matchCriteriaId":"6CA8E734-4071-41D0-9543-A440A2C3DBA6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg60w:-:*:*:*:*:*:*:*","matchCriteriaId":"A5A7555E-BC29-460C-A701-7DCDEAFE67F3"}]}]}],"references":[{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-in-firewalls","source":"security@zyxel.com.tw","tags":["Vendor Advisory"]},{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-in-firewalls","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}