Vulnerabilitycritical

Zyxel fixed a critical RCE flaw in its firewall devices and urges customers to install the patches

Security Affairsby @securityaffairsApr 28, 2023 · 13:49 UTC (Apr 28, 2023)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-28771 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-28771 CVE-2023-27991 CVE-2023-27990

Tags: cve-2023-28771 cve-2023-27991 cve-2023-27990 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-27991 +1 related CVE CVE-2023-27990	The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware…	8.8 group max	1%		Apr 24, 2023
CVE-2023-28771	Unauthenticated OS Command Injection in Zyxel ATP, USG FLEX, VPN, and ZyWALL Firewalls	9.8	99%	KEVPoC	Apr 25, 2023 KEV May 31, 2023

From the original article

2 min read at securityaffairs.com

A vulnerability impacting Zyxel firewalls, tracked as CVE-2023-28771, can be exploited to execute arbitary code on vulnerable devices. Researchers from TRAPA Security have discovered a critical remote code execution vulnerability, tracked as CVE-2023-28771 (CVSS score 9. 8), impacting Zyxel Firewall.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.