CVE-2023-28771

critical · 9.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2023-05-31Remediation due 2023-06-21

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.

9.8

CVSS

99.3%

EPSS (exploit prob.)

100th

EPSS percentile

2023-04-25

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
zyxel	atp100_firmware	>= 4.60, < 5.36
zyxel	atp100	all versions
zyxel	atp100w_firmware	>= 4.60, < 5.35
zyxel	atp100w	all versions
zyxel	atp200_firmware	>= 4.60, < 5.36
zyxel	atp200	all versions
zyxel	atp500_firmware	>= 4.60, < 5.36
zyxel	atp500	all versions
zyxel	atp700_firmware	>= 4.60, < 5.36
zyxel	atp700	all versions
zyxel	atp800_firmware	>= 4.60, < 5.36
zyxel	atp800	all versions
zyxel	usg_flex_100_firmware	>= 4.60, < 5.36
zyxel	usg_flex_100	all versions
zyxel	usg_flex_100w_firmware	>= 4.60, < 5.36
zyxel	usg_flex_100w	all versions
zyxel	usg_flex_200_firmware	>= 4.60, < 5.36
zyxel	usg_flex_200	all versions
zyxel	usg_flex_50_firmware	>= 4.60, < 5.36
zyxel	usg_flex_50	all versions
zyxel	usg_flex_500_firmware	>= 4.60, < 5.36
zyxel	usg_flex_500	all versions
zyxel	usg_flex_50w_firmware	>= 4.60, < 5.36
zyxel	usg_flex_50w	all versions
zyxel	usg_flex_700_firmware	>= 4.60, < 5.36
zyxel	usg_flex_700	all versions
zyxel	vpn100_firmware	>= 4.60, < 5.36
zyxel	vpn100	all versions
zyxel	vpn1000_firmware	>= 4.60, < 5.36
zyxel	vpn1000	all versions
zyxel	vpn300_firmware	>= 4.60, < 5.36
zyxel	vpn300	all versions
zyxel	vpn50_firmware	>= 4.60, < 5.36
zyxel	vpn50	all versions
zyxel	zywall_usg_310_firmware	>= 4.60, < 4.73
zyxel	zywall_usg_310_firmware	4.73
zyxel	zywall_usg_310	all versions
zyxel	zywall_usg_100_firmware	>= 4.60, < 4.73
zyxel	zywall_usg_100_firmware	4.73
zyxel	zywall_usg_100	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-28771