ZyXEL ZyWALL VPN2S Firmware

• CVE-2021-35028 High 7.3 A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands. 0.3%
• CVE-2021-35027 High 7.5 A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information. 2.0%