Exploit / PoCcriticalExploited in the wild

Zyxel addressed critical flaw CVE-2023

Security Affairsby @securityaffairsJun 20, 2023 · 14:08 UTC (Jun 20, 2023)2 min read3 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-27992 CVE-2023-28771 CVE-2023-33009 CVE-2023-33010

Tags: cve-2023-27992 cve-2023-28771 cve-2023-33009 cve-2023-33010 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-27992	Unauthenticated Command Injection in Zyxel NAS326, NAS540, NAS542	9.8	82%	KEV	Jun 19, 2023 KEV Jun 23, 2023
CVE-2023-28771	Unauthenticated OS Command Injection in Zyxel ATP, USG FLEX, VPN, and ZyWALL Firewalls	9.8	99%	KEVPoC	Apr 25, 2023 KEV May 31, 2023
CVE-2023-33010 +1 related CVE CVE-2023-33009	Buffer Overflow in Zyxel ATP, USG FLEX, VPN and ZyWALL/USG Firewalls Enables RCE	9.8	29%	KEV	May 24, 2023 KEV Jun 5, 2023

From the original article

2 min read at securityaffairs.com

Zyxel released security updates to address a critical vulnerability affecting its network-attached storage (NAS) devices. Zyxel released security updates to address a critical security flaw, tracked as CVE-2023-27992 (CVSS score: 9. 8), affecting its network-attached storage (NAS) devices.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.