VYPR
← All advisories
High severity7.2NVD Advisory· Published May 30, 2023· Updated Jun 17, 2026

CVE-2023-27988

CVE-2023-27988

Description

The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Zyxel/NAS326llm-fuzzy
    Range: <V5.21(AAZF.13)C0
  • Zyxel/Nas326 Firmwarecpe-rescue2 versions
    < V5.21(AAZF.13)C0+ 1 more
    • (no CPE)range: < V5.21(AAZF.13)C0
    • cpe:2.3:o:zyxel:nas326_firmware:*:*:*:*:*:*:*:*range: <5.21\(aazf.13\)c0
  • Zyxel/Nas540 Firmware
    cpe:2.3:o:zyxel:nas540_firmware:*:*:*:*:*:*:*:*
    Range: <5.21\(aatb.10\)c0
  • Zyxel/Nas542 Firmware
    cpe:2.3:o:zyxel:nas542_firmware:*:*:*:*:*:*:*:*
    Range: <5.21\(abag.10\)c0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.