USG110 - FW v4.72 - different vulnerabilities solved (or not?)

Options
USG_User
USG_User Posts: 400 image  Master Member
5 Answers First Comment Friend Collector Seventh Anniversary
edited May 2022 in Security
Just reading the feature log of the latest FW patch v4.72. It's listing the following vulnerabilities which have been dealt with:
CVE-2022-0778
CVE-2022-0342
CVE-2021-44224

So far so good. But your latest security advisory of today ( https://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml ) is listing the following v4.71 vulnerabilities, which should be mitigated by v4.72, too:
CVE-2022-26531
CVE-2022-26532
CVE-2022-0910

Why nothing of these vulnerabilities is written about in the v4.72 feature log?

All Replies

  • mMontana
    mMontana Posts: 1,473 image  Guru Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    Why nothing of these vulnerabilities is written about in the v4.72 feature log?
    As a personal opinion, these vulnerabilities are not yet mitigated/solved into 4.72.

  • Zyxel_Vic
    Zyxel_Vic Posts: 323 image  Zyxel Employee
    25 Answers First Comment Friend Collector Eighth Anniversary
    Hi @USG_User
    We're sorry for the confusion
    This vulnerability has been fixed aggressively into regular release but we did not disclose it since the official disclosure time has not been aligned with the researcher at that moment. In the meantime, we also updated device what's new with CVE info afterward, expected users getting real time notice from device directly.
    Here it is the what's new content:

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）