High severity8.8NVD Advisory· Published Jul 17, 2023· Updated Jun 17, 2026
CVE-2023-34139
CVE-2023-34139
Description
A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:o:zyxel:zywall_vpn_100_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:zyxel:zywall_vpn_100_firmware:*:*:*:*:*:*:*:*range: >=4.20,<5.37
- cpe:2.3:o:zyxel:zywall_vpn100_firmware:*:*:*:*:*:*:*:*range: >=4.20,<5.37
- cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*Range: >=4.50,<5.37
cpe:2.3:o:zyxel:zywall_vpn300_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:zyxel:zywall_vpn300_firmware:*:*:*:*:*:*:*:*range: >=4.20,<5.37
- cpe:2.3:o:zyxel:zywall_vpn_300_firmware:*:*:*:*:*:*:*:*range: >=4.20,<5.37
cpe:2.3:o:zyxel:zywall_vpn50_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:zyxel:zywall_vpn50_firmware:*:*:*:*:*:*:*:*range: >=4.20,<5.37
- cpe:2.3:o:zyxel:zywall_vpn_50_firmware:*:*:*:*:*:*:*:*range: >=4.20,<5.37
- Range: 4.20 through 5.36 Patch 2
- Range: 4.50 through 5.36 Patch 2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.