CVE-2023-27992: Zyxel Multiple NAS Devices Command Injection Vulnerability
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request.
Other sources
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zyxel NAS326to a version that resolves this vulnerability.Fixed in V5.21(AAZF.14)C0 - Upgrade
Upgrade
Zyxel NAS540to a version that resolves this vulnerability.Fixed in V5.21(AATB.11)C0 - Upgrade
Upgrade
Zyxel NAS542to a version that resolves this vulnerability.Fixed in V5.21(ABAG.11)C0
Event History
Frequently Asked Questions
What is CVE-2023-27992?
CVE-2023-27992 is a command injection vulnerability found in multiple Zyxel network-attached storage (NAS) devices.
How severe is CVE-2023-27992?
CVE-2023-27992 is rated as a high severity vulnerability.
How can an attacker exploit CVE-2023-27992?
An unauthenticated attacker can exploit CVE-2023-27992 by sending a crafted HTTP request to execute arbitrary commands remotely on the affected NAS devices.
Has Zyxel released a security advisory for CVE-2023-27992?
Yes, Zyxel has released a security advisory for the pre-authentication command injection vulnerability in their NAS products.
Where can I find more information about CVE-2023-27992?
You can find more information about CVE-2023-27992 in the Zyxel security advisory on their official website.