High severity8.8NVD Advisory· Published Aug 14, 2023· Updated Jun 17, 2026

CVE-2023-33013

Description

A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/Nbg6604 Firmware
cpe:2.3:o:zyxel:nbg6604_firmware:1.01\(abir.1\)c0:*:*:*:*:*:*:*
Zyxel/NBG6604llm-fuzzy
Range: V1.01(ABIR.1)C0
Zyxel/Nbg6716 Firmwarecpe-rescue
Range: V1.01(ABIR.1)C0

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-in-ntp-feature-of-nbg6604-home-routernvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000