VulnerabilitycriticalExploited in the wild

Critical Zyxel NAS vulnerabilities patched, update quickly!

Help Net Securityby @zeljkazorzDec 5, 2023 · 10:20 UTC (Dec 5, 2023)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-35137 CVE-2023-35138 CVE-2023-37927 CVE-2023-37928 CVE-2023-4473 CVE-2023-4474 CVE-2023-27992

Tags: cve-2023-35137 cve-2023-35138 cve-2023-37927 cve-2023-37928 cve-2023-4473 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-27992	Unauthenticated Command Injection in Zyxel NAS326, NAS540, NAS542	9.8	82%	KEV	Jun 19, 2023 KEV Jun 23, 2023
CVE-2023-4473 +5 related CVEs CVE-2023-35138 CVE-2023-4474 CVE-2023-37928 CVE-2023-37927 CVE-2023-35137	A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could…	9.8 group max	41%		Nov 30, 2023

From the original article

2 min read at helpnetsecurity.com

Zyxel has patched six vulnerabilities affecting its network attached storage (NAS) devices, including several (OS) command injection flaws that can be easily exploited by unauthenticated attackers.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.