Veille CVE

Lundi 16 mai 2022

2 CVE

  1. CVE-2022-30525 – Non évaluée Exploitée

    Zyxel Multiple Firewalls

    Zyxel Multiple Firewalls OS Command Injection Vulnerability — A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

  2. CVE-2022-22947 – Non évaluée Exploitée

    VMware Spring Cloud Gateway

    VMware Spring Cloud Gateway Code Injection Vulnerability — Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.