Vulnerabilitycritical
Critical RCE Vulnerability Affects Zyxel NAS Devices — Firmware Patch Released
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-0823 | An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing… | 6.2 | <1% | ||
CVE-2022-30526+1 related CVE | A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware… | 7.8 group max | 1% | PoC | |
| CVE-2022-34747 | A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized remote code execution… | 9.8 | 2% |
From the original article
1 min read at thehackernews.com
Networking equipment maker Zyxel has released patches for a critical security flaw impacting its network-attached storage (NAS) devices. Tracked as CVE-2022-34747 (CVSS score: 9. 8), the issue relates to a "format string vulnerability" affecting NAS326, NAS540, and NAS542 models.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.