[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2020-29299":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":28,"technologies":38,"references":46,"score":49,"epss_score":50,"epss_percentile":51,"is_kev":52,"cisa_kev_date_added":53,"cisa_kev_due_date":53,"cisa_ssvc":54,"attack_mappings":60,"exploits":67},269829,"CVE-2020-29299","EUVD-2020-21674","Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator before SD-OS V10.03 week32, USG before ZLD V4.39 week38, USG FLEX before ZLD V4.55 week38, ATP before ZLD V4.55 week38, and NSG before 1.33 patch 4.","2020-12-27T06:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",9,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE","LOW",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":24,"attackComplexity":17,"availabilityImpact":22,"privilegesRequired":22,"confidentialityImpact":22},"UNCHANGED","3.1",7.2,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE",true,[27],"CWE-77",[29,30,31,32,33,34,35,36,37],"cpe:2.3:o:zyxel:nsg_firmware:*:*:*:*:*:*:*:*","cpe:2.3:h:zyxel:nsg:-:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:usg_flex_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:nsg_firmware:1.33:patch1:*:*:*:*:*:*","cpe:2.3:h:zyxel:usg_flex:-:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:vpn_orchestrator:*:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:nsg_firmware:1.33:-:*:*:*:*:*:*","cpe:2.3:h:zyxel:atp:-:*:*:*:*:*:*:*",[39,40,41,42,43,44,45],"Zyxel Zld","Zyxel Nsg Firmware","Zyxel Usg Flex Firmware","Zyxel Atp","Zyxel Usg Flex","Zyxel Nsg","Zyxel Vpn Orchestrator",[47,48],"https:\u002F\u002Fwww.zyxel.com\u002Fsupport\u002FZyxel-security-advisory-for-command-injection-vulnerability-of-firewalls.shtml","https:\u002F\u002Fwww.zyxel.com\u002Fus\u002Fen\u002Fsupport\u002Fsecurity_advisories.shtml",0.56,0.02372,0.83725,false,null,{"timestamp":53,"automatable":55,"tech_impact":56,"exploitation":57,"cisa_decision":58,"cisa_remediation_timeline":59},"no","partial","none",{},"FSU",[61],{"name":62,"source":63,"tactics":64,"technique_id":66},"Exploit Public-Facing Application","attack_vector",[65],"initial-access","T1190",[]]