VYPR
← All advisories
High severity8.0NVD Advisory· Published Jul 17, 2023· Updated Jun 17, 2026

CVE-2023-34141

CVE-2023-34141

Description

A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.00 through 5.36 Patch 2, VPN series firmware versions 5.00 through 5.36 Patch 2, NXC2500 firmware versions 6.10(AAIG.0) through 6.10(AAIG.3), and NXC5500 firmware versions 6.10(AAOS.0) through 6.10(AAOS.4), could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the managed AP list in advance.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

37
  • Zyxel/Nxc2500 Firmware2 versions
    cpe:2.3:o:zyxel:nxc2500_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:zyxel:nxc2500_firmware:*:*:*:*:*:*:*:*range: >=6.10\(aaig.0\),<=6.10\(aaig.3\)
    • (no CPE)range: 6.10(AAIG.0) through 6.10(AAIG.3)
  • Zyxel/Nxc5500 Firmware2 versions
    cpe:2.3:o:zyxel:nxc5500_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:zyxel:nxc5500_firmware:*:*:*:*:*:*:*:*range: >=6.10\(aaos.0\),<=6.10\(aaos.4\)
    • (no CPE)range: 6.10(AAOS.0) through 6.10(AAOS.4)
  • Zyxel/Usg20w VPN Firmware
    cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Usg2200 VPN Firmware
    cpe:2.3:o:zyxel:usg_2200-vpn_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Usg Flex 100 Firmware
    cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Usg Flex 100w Firmware
    cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Usg Flex 200 Firmware
    cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Usg Flex 500 Firmware
    cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Usg Flex 50 Firmware
    cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Usg Flex 50w Firmware
    cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Usg Flex 700 Firmware
    cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Zywall Atp100 Firmware
    cpe:2.3:o:zyxel:zywall_atp100_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Zywall Atp100w Firmware
    cpe:2.3:o:zyxel:zywall_atp100w_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Zywall Atp200 Firmware
    cpe:2.3:o:zyxel:zywall_atp200_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Zywall Atp500 Firmware
    cpe:2.3:o:zyxel:zywall_atp500_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Zywall Atp700 Firmware
    cpe:2.3:o:zyxel:zywall_atp700_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Zywall Atp800 Firmware
    cpe:2.3:o:zyxel:zywall_atp800_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Zywall Vpn100 Firmware2 versions
    cpe:2.3:o:zyxel:zywall_vpn100_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:zyxel:zywall_vpn100_firmware:*:*:*:*:*:*:*:*range: >=5.00,<5.37
    • cpe:2.3:o:zyxel:zywall_vpn_100_firmware:*:*:*:*:*:*:*:*range: >=5.00,<5.37
  • Zyxel/Zywall Vpn2s Firmware
    cpe:2.3:o:zyxel:zywall_vpn2s_firmware:*:*:*:*:*:*:*:*
    Range: >=5.00,<5.37
  • Zyxel/Zywall Vpn300 Firmware2 versions
    cpe:2.3:o:zyxel:zywall_vpn300_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:zyxel:zywall_vpn300_firmware:*:*:*:*:*:*:*:*range: >=5.00,<5.37
    • cpe:2.3:o:zyxel:zywall_vpn_300_firmware:*:*:*:*:*:*:*:*range: >=5.00,<5.37
  • Zyxel/Zywall Vpn50 Firmware2 versions
    cpe:2.3:o:zyxel:zywall_vpn50_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:zyxel:zywall_vpn50_firmware:*:*:*:*:*:*:*:*range: >=5.00,<5.37
    • cpe:2.3:o:zyxel:zywall_vpn_50_firmware:*:*:*:*:*:*:*:*range: >=5.00,<5.37
  • Zyxel/NXC5500llm-create
    Range: 6.10(AAOS.0) - 6.10(AAOS.4)
  • Zyxel/VPN seriesllm-fuzzy2 versions
    5.00 - 5.36 Patch 2+ 1 more
    • (no CPE)range: 5.00 - 5.36 Patch 2
    • (no CPE)range: 5.00 through 5.36 Patch 2
  • Zyxel/NXC2500llm-fuzzy
    Range: 6.10(AAIG.0) - 6.10(AAIG.3)
  • Zyxel/ATP seriesllm-fuzzy2 versions
    5.00 - 5.36 Patch 2+ 1 more
    • (no CPE)range: 5.00 - 5.36 Patch 2
    • (no CPE)range: 5.00 through 5.36 Patch 2
  • Zyxel/USG FLEX seriesllm-fuzzy3 versions
    5.00 - 5.36 Patch 2+ 2 more
    • (no CPE)range: 5.00 - 5.36 Patch 2
    • (no CPE)range: 5.00 through 5.36 Patch 2
    • (no CPE)range: 5.00 through 5.36 Patch 2
  • Zyxel/USG20(W)-VPN seriesllm-fuzzy2 versions
    5.00 - 5.36 Patch 2+ 1 more
    • (no CPE)range: 5.00 - 5.36 Patch 2
    • (no CPE)range: 5.00 through 5.36 Patch 2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.