Unrated severityNVD Advisory· Published Jul 17, 2023· Updated Oct 29, 2024

CVE-2023-34139

Description

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/USG FLEX 50(W)llm-fuzzy
Range: >=4.50, <=5.36 Patch 2
Zyxel/VPN seriesllm-fuzzy2 versions
>=4.20, <=5.36 Patch 2+ 1 more
- (no CPE)range: >=4.20, <=5.36 Patch 2
- (no CPE)range: 4.20 through 5.36 Patch 2
Zyxel/USG FLEX seriescpe-rescue
Range: 4.50 through 5.36 Patch 2

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllersmitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000