CVE-2023-34141

State: Published
Severity: 8.0 High
Published: Jul 17, 2023
Updated: Oct 29, 2024
Reserved: May 26, 2023

Description

A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.00 through 5.36 Patch 2, VPN series firmware versions 5.00 through 5.36 Patch 2, NXC2500 firmware versions 6.10(AAIG.0) through 6.10(AAIG.3), and NXC5500 firmware versions 6.10(AAOS.0) through 6.10(AAOS.4), could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the managed AP list in advance.

Scores

CVSS	Score	Vector	Source
3.1	8.0 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Zyxel

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
ATP series firmwareZyxel	5.00 through 5.36 Patch 2Affected
USG FLEX series firmwareZyxel	5.00 through 5.36 Patch 2Affected
USG FLEX 50(W) series firmwareZyxel	5.00 through 5.36 Patch 2Affected
USG20(W)-VPN series firmwareZyxel	5.00 through 5.36 Patch 2Affected
VPN series firmwareZyxel	5.00 through 5.36 Patch 2Affected
NXC2500 firmwareZyxel	6.10(AAIG.0) through 6.10(AAIG.3)Affected
NXC5500 firmwareZyxel	6.10(AAOS.0) through 6.10(AAOS.4)Affected

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllersvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.