Vulnerabilitycritical

Zyxel addressed a critical RCE flaw in its NAS devices

Security Affairsby @securityaffairsSep 7, 2022 · 08:53 UTC (Sep 7, 2022)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-34747 CVE-2022-26532 CVE-2022-0734 CVE-2022-26531 CVE-2022-0910

Tags: cve-2022-34747 cve-2022-26532 cve-2022-0734 cve-2022-26531 cve-2022-0910 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-26531 +3 related CVEs CVE-2022-26532 CVE-2022-0910 CVE-2022-0734	Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series…	7.8 group max	6%		May 24, 2022
CVE-2022-34747	A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized remote code execution…	9.8	2%		Sep 6, 2022

From the original article

2 min read at securityaffairs.com

Networking equipment vendor Zyxel addressed a critical vulnerability impacting its network-attached storage (NAS) devices. Zyxel addressed a critical vulnerability, tracked as CVE-2022-34747 , impacting its network-attached storage (NAS) devices. The CVE-2022-34747 (CVSS score: 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.