Exploit / PoCcriticalExploited in the wild

Zyxel shares guidance for protecting devices from ongoing attacks

Security Affairsby @securityaffairsJun 4, 2023 · 08:45 UTC (Jun 4, 2023)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-28771 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-28771 CVE-2023-33009 CVE-2023-33010

Tags: cve-2023-28771 cve-2023-33009 cve-2023-33010 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-28771	Unauthenticated OS Command Injection in Zyxel ATP, USG FLEX, VPN, and ZyWALL Firewalls	9.8	99%	KEVPoC	Apr 25, 2023 KEV May 31, 2023
CVE-2023-33010 +1 related CVE CVE-2023-33009	Buffer Overflow in Zyxel ATP, USG FLEX, VPN and ZyWALL/USG Firewalls Enables RCE	9.8	29%	KEV	May 24, 2023 KEV Jun 5, 2023

From the original article

2 min read at securityaffairs.com

Zyxel has published guidance for protecting firewall and VPN devices from the ongoing attacks recently discovered. Zyxel has published guidance for protecting firewall and VPN devices from ongoing attacks exploiting CVE-2023-28771 , CVE-2023-33009 , and CVE-2023-33010 vulnerabilities.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.