CVE Watch—

CVE-2023-28771

Zyxel Multiple Firewalls OS Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

99.3%

p100

KEV

SIM

31 de mai. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.3%EPSS · 30 dias99.3%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Zyxel / Multiple Firewalls

Vulnerabilidade

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Adicionado ao KEV

31 de mai. de 2023

Corrigir até

21 de jun. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-28771

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2024-116677.5 ALT

87.2%

KEV—76Zyxel Multiple Firewalls Path Traversal Vulnerability93d CVE-2022-30525—

100.0%

KEV—80Zyxel Multiple Firewalls OS Command Injection Vulnerability—CVE-2023-33010—

98.2%

KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—CVE-2023-33009—

98.1%

KEV—79Zyxel Multiple Firewalls Buffer Overflow Vulnerability—