Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

Zyxel fixed tens of flaws in Firewalls, Access Points, and NAS

Security Affairsby @securityaffairs ()3 min read2 · 1 read
Read at securityaffairs.com
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
CVEs
CVE-2023-35136CVE-2023-35139CVE-2023-37925CVE-2023-37926CVE-2023-4397CVE-2023-4398CVE-2023-5650CVE-2023-5797CVE-2023-5960CVE-2023-35137CVE-2023-35138CVE-2023-37927CVE-2023-37928CVE-2023-4473CVE-2023-4474
Tags
cve-2023-35136cve-2023-35139cve-2023-37925cve-2023-37926cve-2023-4397vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-4398
+8 related CVEs
CVE-2023-35139CVE-2023-35136CVE-2023-37926CVE-2023-37925CVE-2023-5960CVE-2023-5650CVE-2023-5797CVE-2023-4397
An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32…
7.5
group max
<1%
CVE-2023-4473
+5 related CVEs
CVE-2023-35138CVE-2023-4474CVE-2023-37928CVE-2023-37927CVE-2023-35137
A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could…
9.8
group max
41%

From the original article

3 min read at securityaffairs.com

Zyxel addressed tens of vulnerabilities that expose users to cyber attacks, including command injection and authentication bypass. Taiwanese vendor Zyxel addressed tens of vulnerabilities in its firewalls and access points. The addressed issues are tracked as CVE-2023-35136 , CVE-2023-35139 , CVE-2023-37925 , CVE-2023-37926 , CVE-2023-4397 , CVE-2023-4398 , CVE-2023-5650 , CVE-2023-5797 , CVE-2023-5960 .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.