Vulnerabilitycritical
Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks — Patch Now
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-43389 | A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated… | 9.8 | <1% | ||
| CVE-2023-22913 | A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35… | 8.1 | 1% | ||
CVE-2023-27991+1 related CVE | The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware… | 8.8 group max | 1% | ||
| CVE-2023-28771 | Unauthenticated OS Command Injection in Zyxel ATP, USG FLEX, VPN, and ZyWALL Firewalls | 9.8 | 99% | KEVPoC | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Apr 28, 2023 Network Security / Vulnerability Networking equipment maker Zyxel has released patches for a critical security flaw in its firewall devices that could be exploited to achieve remote code execution on affected systems. The issue, tracked as CVE-2023-28771 , is rated 9. 8 on the CVSS scoring system.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.