CVE-2022-30525 PoC — 合勤科技 USG FLEX 操作系统命令注入漏洞

Source

https://github.com/shuai06/CVE-2022-30525

Associated Vulnerability

Title: 合勤科技 USG FLEX 操作系统命令注入漏洞 (CVE-2022-30525)
Description:A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Description

Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）批量检测脚本

Readme

# CVE-2022-30525
Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）批量检测脚本
> 脚本仅提供测试功能，不包含实际攻击请求，仅用于安全检测，一切利用脚本进行违法测试的行为均与本人无关



![](https://tva1.sinaimg.cn/large/e6c9d24ely1h274kbmig8j21yc0dyjti.jpg)

![](https://tva1.sinaimg.cn/large/e6c9d24ely1h274q3zr04j21v40i20vf.jpg)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →