CVE-2023-34138

🗓️ 17 Jul 2023 17:31:40Reported by ZyxelType

CVE-2023-34138 Command injection vuln. in Zyxel ATP & USG FLEX series firmware 4.60-5.36 Patch 2 allows unauthenticated LAN-based attacker to execute OS commands

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the access point management function in microprogrammed software for Zyxel USG FLEX, USG FLEX 50(W), USG20(W)-VPN, ATP, and VPN allows a hacker to execute arbitrary commands.	24 Jul 202300:00	–	bdu_fstec
CNNVD	Zyxel ATP 操作系统命令注入漏洞	17 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-34138	17 Jul 202317:31	–	cvelist
EUVD	EUVD-2023-38240	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel products	18 Jul 202300:00	–	ncsc
NVD	CVE-2023-34138	17 Jul 202318:15	–	nvd
OSV	CVE-2023-34138	17 Jul 202318:15	–	osv
Prion	Command injection	17 Jul 202318:15	–	prion
Positive Technologies	PT-2023-3691 · Zyxel · Zyxel Usg Flex Series +4	26 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-34138	23 May 202505:21	–	redhatcve

NVD

Node

zyxel usg_20w-vpn_firmwareRange4.60–5.37

AND

zyxel usg_20w-vpnMatch-

Node

zyxel usg_2200-vpn_firmwareRange4.60–5.37

AND

zyxel usg_2200-vpnMatch-

Node

zyxel usg_flex_100_firmwareRange4.60–5.37

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_100w_firmwareRange4.60–5.37

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_200_firmwareRange4.60–5.37

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_50_firmwareRange4.60–5.37

AND

zyxel usg_flex_50Match-

Node

zyxel usg_flex_500_firmwareRange4.60–5.37

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_50w_firmwareRange4.60–5.37

AND

zyxel usg_flex_50wMatch-

Node

zyxel usg_flex_700_firmwareRange4.60–5.37

AND

zyxel usg_flex_700Match-

Node

zyxel zywall_atp100_firmwareRange4.60–5.37

AND

zyxel zywall_atp100Match-

Node

zyxel zywall_atp100w_firmwareRange4.60–5.37

AND

zyxel zywall_atp100wMatch-

Node

zyxel zywall_atp200_firmwareRange4.60–5.37

AND

zyxel zywall_atp200Match-

Node

zyxel zywall_atp500_firmwareRange4.60–5.37

AND

zyxel zywall_atp500Match-

Node

zyxel zywall_atp700_firmwareRange4.60–5.37

AND

zyxel zywall_atp700Match-

Node

zyxel zywall_atp800_firmwareRange4.60–5.37

AND

zyxel zywall_atp800Match-

Node

zyxel zywall_vpn100_firmwareRange4.60–5.37

AND

zyxel zywall_vpn100Match-

Node

zyxel zywall_vpn2s_firmwareRange4.60–5.37

AND

zyxel zywall_vpn2sMatch-

Node

zyxel zywall_vpn300_firmwareRange4.60–5.37

AND

zyxel zywall_vpn300Match-

Node

zyxel zywall_vpn50_firmwareRange4.60–5.37

AND

zyxel zywall_vpn50Match-

Node

zyxel zywall_vpn_100_firmwareRange4.60–5.37

AND

zyxel zywall_vpn_100Match-

Node

zyxel zywall_vpn_300_firmwareRange4.60–5.37

AND

zyxel zywall_vpn_300Match-

Node

zyxel zywall_vpn_50_firmwareRange4.60–5.37

AND

zyxel zywall_vpn_50Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.60 through 5.36 Patch 2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.60 through 5.36 Patch 2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX 50(W) series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.60 through 5.36 Patch 2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG20(W)-VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.60 through 5.36 Patch 2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.60 through 5.36 Patch 2"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers

17 Jun 2026 06:02Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18

EPSS0.00629

SSVC

CWE-78