Firewalls Family for Nessus

IDNameSeverity
177118Fortinet FortiWeb DoS in firmware upgrade function (FG-IR-22-375)
medium
177117Fortinet Fortigate Read Only administrator can intercept sensitive data (FG-IR-22-380)
medium
177116Fortinet Fortigate Heap buffer overflow in sslvpn pre-authentication (FG-IR-23-097)
critical
176894Zyxel NAS < 5.21 / USG < 4.35 / ATP < 4.35 / VPN < 4.35 / ZyWALL < 4.35 RCE (CVE-2020-9054)
critical
176416Zyxel USG < 4.35 / ATP < 4.35 / VPN < 4.35 / ZyWALL < 4.35 (RCE) (CVE-2020-9054)
critical
176238Zyxel Command Injection (CVE-2023-28771) (Direct Check)
critical
176216Zyxel USG < 5.36 / ATP < 5.36 / VPN < 5.36 / ZyWALL < 4.73 Patch 1 (RCE) (CVE-2023-28771)
critical
175084Fortinet Fortigate Out-of-bound-write in sslvpnd (FG-IR-22-475)
high
174404Fortinet Fortigate Ability to modify privileges from Custom to Read-Write (FG-IR-22-346)
medium
174403Fortinet Fortigate Lack of certificate verification when establishing secure connections with threat feed fabric connectors (FG-IR-22-257)
high
174402Fortinet Fortigate Header injection in proxy login page (FG-IR-22-362)
medium
174401Fortinet Fortigate Flaws over DHCP and DNS keys encryption scheme (FG-IR-22-080)
low
174265Fortinet FortiWeb OS command injection in CLI (FG-IR-22-186)
high
174264Fortinet Fortigate xss (FG-IR-22-363)
medium
174263Fortinet Fortigate Policy-based NGFW SSL VPN mode doesn't filter accesses via Bookmarks (FG-IR-22-381)
medium
174262Fortinet Fortigate (FG-IR-22-444)
high
174258Fortinet FortiWeb xss (FG-IR-22-428)
medium
174237Fortinet Fortigate Open redirect in sslvpnd (FG-IR-22-479)
medium
174223Fortinet Fortigate xss (FG-IR-22-224)
medium
173302SonicWall SonicOS Buffer Overflow (SNWLID-2023-0004)
high
172582Zyxel USG Hardcoded Default Password (CVE-2020-29583)
critical
172579Fortinet FortiOS - Path Traversal Vulnerability (FG-IR-22-401)
high
172492Fortinet FortiOS - Information Disclosure (FG-IR-22-364)
medium
172491Fortinet FortiOS - Path Traversal in Execute Command (FG-IR-22-369)
high
172440SonicWall SonicOS Security Misconfiguration (SNWLID-2023-0005)
high
172395Fortinet Fortigate Access of NULL pointer in SSLVPNd (FG-IR-22-477)
medium
172390Fortinet Fortigate Heap buffer underflow in administrative interface (FG-IR-23-001)
critical
172258Zyxel Unified Security Gateway (USG) Local Detection
info
172171Fortinet FortiWeb Stack-based buffer overflows in Proxyd (FG-IR-21-186)
critical
171902Fortinet FortiWeb Stack based buffer overflow in SAML management (FG-IR-22-151)
high
171888Fortinet Fortigate Padding oracle in cookie encryption (FG-IR-21-126)
medium
171887Fortinet FortiWeb Padding oracle in cookie encryption (FG-IR-21-126)
medium
171852Fortinet Fortigate Arbitrary read/write vulnerability in administrative interface (FG-IR-22-391)
high
171238Sophos SG UTM < 9.511 / 9.6 < 9.607 / 9.7 < 9.705 RCE (CVE-2020-25223)
critical
170906Sophos Unified Threat Management (UTM) Local Detection
info
170671Fortinet FortiManager Incorrect User Management (FG-IR-22-371)
high
168637Fortinet Fortigate Heap-based buffer overflow in sslvpnd (FG-IR-22-398)
critical
168124Sophos XG Firewall <= 19.0.1 RCE
critical
166983Fortinet Fortigate RSA SSH host key lost at shutdown (FG-IR-22-228)
high
166982Fortinet Fortigate Read-Only users able to add/modify the Interface fields using the API (FG-IR-22-174)
medium
166981Fortinet Fortigate Telnet on the SSL-VPN interface results in information leak (FG-IR-22-223)
high
165982Fortinet Fortigate Privilege escalation via switch-control CLI command (FG-IR-21-242)
high
165765Fortinet FortiWeb sqli (FG-IR-22-140)
high
165763Fortinet Fortigate Authentication bypass in administrative interface (FG-IR-22-377)
critical
165242Fortinet Fortigate Flaws over keytab encryption scheme (FG-IR-22-158)
low
165179Fortinet Fortigate xss (FG-IR-21-222)
medium
164722Fortinet FortiWeb OS command injection due to direct input interpolation in API controllers (FG-IR-21-180)
high
163711Fortinet Fortigate Inter-VDOM information leaking (FG-IR-22-036)
medium
163262Fortinet FortiOS Buffer Overflow (FG-IR-21-206)
medium
163254Fortinet FortiManager Buffer Overflow (FG-IR-21-206)
medium