CVE Watch—

CVE-2023-28771

Zyxel Multiple Firewalls OS Command Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

99.3%

p100

KEV

SÍ

31 may 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.3%EPSS · 30 días99.3%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Zyxel / Multiple Firewalls

Vulnerabilidad

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Añadido a KEV

31 may 2023

Remediar antes de

21 jun 2023

Uso conocido en ransomware

Descripción resumida

Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device.

Acción requerida

Apply updates per vendor instructions.

Notas

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-28771

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2022-30525—

100.0%

KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2023-33010—

97.9%

KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—CVE-2023-33009—

97.9%

KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—CVE-2024-11667—

85.9%

KEV—76Zyxel Multiple Firewalls Path Traversal Vulnerability—