CVE-2023-34138

State: Published
Severity: 8.0 High
Published: Jul 17, 2023
Updated: Oct 30, 2024
Reserved: May 26, 2023

Description

A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.60 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 4.60 through 5.36 Patch 2, and VPN series firmware versions 4.60 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the list of trusted RADIUS clients in advance.

Scores

CVSS	Score	Vector	Source
3.1	8.0 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Zyxel

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
ATP series firmwareZyxel	4.60 through 5.36 Patch 2Affected
USG FLEX series firmwareZyxel	4.60 through 5.36 Patch 2Affected
USG FLEX 50(W) series firmwareZyxel	4.60 through 5.36 Patch 2Affected
USG20(W)-VPN series firmwareZyxel	4.60 through 5.36 Patch 2Affected
VPN series firmwareZyxel	4.60 through 5.36 Patch 2Affected

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllersvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.