CVE:CVE-2022-0734
CNNVD:CNNVD-202205-3997
Zyxel USG/ZyWALL是中国合勤科技（Zyxel）公司的一款防火墙。
Zyxel USG/ZyWALL 4.35-4.70、USG FLEX 4.50-5.20、ATP 4.35-5.20和VPN 4.35-5.20版本中的CGI程序存在跨站脚本漏洞，该漏洞源于存在输入验证错误，攻击者利用该漏洞可进行跨站点脚本攻击。
solution:Upgrade zyxel vpn100_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel vpn1000_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel vpn300_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel vpn50_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel atp100_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel atp100w_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel atp200_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel atp500_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel atp700_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel atp800_firmware to a higher version than 5.20,and avoid the version [4.35,5.20]; Upgrade zyxel usg_110_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_1100_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_1900_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_20w_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_20w-vpn_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_2200-vpn_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_310_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_40_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_40w_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_60_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_60w_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg_flex_100_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg_flex_200_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg_flex_500_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg_flex_700_firmware to a higher version than 5.20,and avoid the version [4.50,5.20]; Upgrade zyxel usg200_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg20_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg210_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg2200_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg300_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]; Upgrade zyxel usg310_firmware to a higher version than 4.70,and avoid the version [4.35,4.70]