CVE-2023-34139: Command Injection
First published: Mon Jul 17 2023(Updated: )
A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device.
Credit: security@zyxel.com.tw security@zyxel.com.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zyxel Usg 2200-vpn Firmware | >=4.20<5.37 | |
| Zyxel Usg 2200-vpn | ||
| Zyxel Usg Flex 100 Firmware | >=4.50<5.37 | |
| Zyxel Usg Flex 100 | ||
| Zyxel Usg Flex 100w Firmware | >=4.50<5.37 | |
| Zyxel Usg Flex 100w | ||
| Zyxel Usg Flex 200 Firmware | >=4.50<5.37 | |
| Zyxel Usg Flex 200 | ||
| Zyxel Usg Flex 50 Firmware | >=4.50<5.37 | |
| Zyxel Usg Flex 50 | ||
| Zyxel Usg Flex 500 Firmware | >=4.50<5.37 | |
| Zyxel Usg Flex 500 | ||
| Zyxel Usg Flex 50w Firmware | >=4.50<5.37 | |
| Zyxel Usg Flex 50w | ||
| Zyxel Usg Flex 700 Firmware | >=4.50<5.37 | |
| Zyxel Usg Flex 700 | ||
| Zyxel Zywall Vpn100 Firmware | >=4.20<5.37 | |
| Zyxel Zywall Vpn100 | ||
| Zyxel Zywall Vpn2s Firmware | >=4.20<5.37 | |
| Zyxel Zywall Vpn2s | ||
| Zyxel Zywall Vpn300 Firmware | >=4.20<5.37 | |
| Zyxel Zywall Vpn300 | ||
| Zyxel Zywall Vpn50 Firmware | >=4.20<5.37 | |
| Zyxel Zywall Vpn50 | ||
| Zyxel Zywall Vpn 100 Firmware | >=4.20<5.37 | |
| Zyxel Zywall Vpn 100 | ||
| Zyxel Zywall Vpn 300 Firmware | >=4.20<5.37 | |
| Zyxel Zywall Vpn 300 | ||
| Zyxel Zywall Vpn 50 Firmware | >=4.20<5.37 | |
| Zyxel Zywall Vpn 50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-34139.
What is the severity of CVE-2023-34139?
The severity of CVE-2023-34139 is high.
Which Zyxel products are affected by CVE-2023-34139?
Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2 are affected.
How can an attacker exploit CVE-2023-34139?
An unauthenticated, LAN-based attacker can exploit CVE-2023-34139 by executing OS commands on an affected device.
Is there a fix for CVE-2023-34139?
Yes, users are advised to upgrade their firmware to version 5.37 or above to mitigate the vulnerability.
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/references
- agent/severity
- agent/type
- agent/event
- agent/weakness
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/zyxel
- canonical/zyxel usg 2200-vpn firmware
- version/zyxel usg 2200-vpn firmware/4.20
- canonical/zyxel usg 2200-vpn
- canonical/zyxel usg flex 100 firmware
- version/zyxel usg flex 100 firmware/4.50
- canonical/zyxel usg flex 100
- canonical/zyxel usg flex 100w firmware
- version/zyxel usg flex 100w firmware/4.50
- canonical/zyxel usg flex 100w
- canonical/zyxel usg flex 200 firmware
- version/zyxel usg flex 200 firmware/4.50
- canonical/zyxel usg flex 200
- canonical/zyxel usg flex 50 firmware
- version/zyxel usg flex 50 firmware/4.50
- canonical/zyxel usg flex 50
- canonical/zyxel usg flex 500 firmware
- version/zyxel usg flex 500 firmware/4.50
- canonical/zyxel usg flex 500
- canonical/zyxel usg flex 50w firmware
- version/zyxel usg flex 50w firmware/4.50
- canonical/zyxel usg flex 50w
- canonical/zyxel usg flex 700 firmware
- version/zyxel usg flex 700 firmware/4.50
- canonical/zyxel usg flex 700
- canonical/zyxel zywall vpn100 firmware
- version/zyxel zywall vpn100 firmware/4.20
- canonical/zyxel zywall vpn100
- canonical/zyxel zywall vpn2s firmware
- version/zyxel zywall vpn2s firmware/4.20
- canonical/zyxel zywall vpn2s
- canonical/zyxel zywall vpn300 firmware
- version/zyxel zywall vpn300 firmware/4.20
- canonical/zyxel zywall vpn300
- canonical/zyxel zywall vpn50 firmware
- version/zyxel zywall vpn50 firmware/4.20
- canonical/zyxel zywall vpn50
- canonical/zyxel zywall vpn 100 firmware
- version/zyxel zywall vpn 100 firmware/4.20
- canonical/zyxel zywall vpn 100
- canonical/zyxel zywall vpn 300 firmware
- version/zyxel zywall vpn 300 firmware/4.20
- canonical/zyxel zywall vpn 300
- canonical/zyxel zywall vpn 50 firmware
- version/zyxel zywall vpn 50 firmware/4.20
- canonical/zyxel zywall vpn 50