Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Zyxel Vulnerability Exploited by DDoS Botnets on Linux Systems

Infosecurity Magazineby Alessandro Mascellino ()1 min read2 · 1 read
Analyze CVE-2023-28771 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-28771
Unauthenticated OS Command Injection in Zyxel ATP, USG FLEX, VPN, and ZyWALL Firewalls
9.899%KEVPoC
KEV

From the original article

1 min read at infosecurity-magazine.com

Distributed Denial of Service (DDoS) botnets have been used to actively exploit a critical vulnerability found in Zyxel firewall models. The flaw, identified by Fortinet security researchers as CVE-2023-28771 , explicitly affects Linux platforms. Exploiting the vulnerability, remote attackers gain unauthorized control over the vulnerable systems, enabling them to conduct DDoS attacks.

Infosecurity Magazine

By Alessandro Mascellino · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.