VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 24, 2023· Updated Feb 4, 2025

CVE-2023-27991

CVE-2023-27991

Description

The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker to execute some OS commands remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Zyxel/USG FLEX 50(W)llm-fuzzy2 versions
    >=4.16, <=5.35+ 1 more
    • (no CPE)range: >=4.16, <=5.35
    • (no CPE)range: 4.16 through 5.35
  • Zyxel/ATP seriesllm-fuzzy2 versions
    >=4.32, <=5.35+ 1 more
    • (no CPE)range: >=4.32, <=5.35
    • (no CPE)range: 4.32 through 5.35
  • Zyxel/USG FLEX seriesllm-fuzzy2 versions
    >=4.50, <=5.35+ 1 more
    • (no CPE)range: >=4.50, <=5.35
    • (no CPE)range: 4.50 through 5.35
  • Zyxel/USG20(W)-VPN firmwarev5
    Range: 4.16 through 5.35
  • Zyxel/VPN seriescpe-rescue
    Range: 4.30 through 5.35

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.