CVE-2023-28771 Zyxel Multiple Firewalls
Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device.
- CVSS
- not scored
On CISA’s exploited list
Zyxel Multiple Firewalls OS Command Injection Vulnerability
- Added
- 2023-05-31
- Federal patch deadline
- 2023-06-21
- Ransomware use
- not known