Vulnerabilitycritical

Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

The Hacker Newsby @TheHackersNewsDec 1, 2023 · 06:22 UTC (Dec 1, 2023)1 min read2

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-35138 CVE-2023-4473 CVE-2023-4474 CVE-2023-35137 CVE-2023-37927 CVE-2023-37928

Tags: cve-2023-35138 cve-2023-4473 cve-2023-4474 cve-2023-35137 cve-2023-37927 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-4473 +5 related CVEs CVE-2023-35138 CVE-2023-4474 CVE-2023-37928 CVE-2023-37927 CVE-2023-35137	A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could…	9.8 group max	41%		Nov 30, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Dec 01, 2023 Firewall / Network Security Zyxel has released patches to address 15 security issues impacting network-attached storage (NAS), firewall, and access point (AP) devices, including three critical flaws that could lead to authentication bypass and command injection. CVE-2023-35138 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.