CVE-2023-27992 Zyxel Multiple Network-Attached Storage (NAS) Devices
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.
- CVSS
- not scored
On CISA’s exploited list
Zyxel Multiple NAS Devices Command Injection Vulnerability
- Added
- 2023-06-23
- Federal patch deadline
- 2023-07-14
- Ransomware use
- not known