CVE-2023-22913

🗓️ 24 Apr 2023 17:15:09Reported by [email protected]Type

nvd🔗 web.nvd.nist.gov👁 47 Views

Zyxel USG FLEX and VPN series firmware post-authentication command injection vulnerability

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	ZyXEL USG FLEX Account Operator CGI Configuration Alteration DoS	30 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-22913	24 Apr 202320:19	–	circl
CNNVD	Zyxel USG FLEX 命令注入漏洞	24 Apr 202300:00	–	cnnvd
CVE	CVE-2023-22913	24 Apr 202300:00	–	cve
Cvelist	CVE-2023-22913	24 Apr 202300:00	–	cvelist
EUVD	EUVD-2023-27015	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel Firewalls and Access Points	25 Apr 202300:00	–	ncsc
osv_cve	CVE-2023-22913	24 Apr 202317:15	–	osv_cve
Prion	Command injection	24 Apr 202317:15	–	prion
Positive Technologies	PT-2023-01: Post-auth Command Injection in account_operator.cgi in Zyxel products	25 Apr 202300:00	–	ptsecurity

NVD

Node

AND

zyxel usg_flex_100_firmwareRange4.50–5.35

zyxel usg_flex_100Match-

Node

AND

zyxel usg_flex_100w_firmwareRange4.50–5.35

zyxel usg_flex_100wMatch-

Node

AND

zyxel usg_flex_200_firmwareRange4.50–5.35

zyxel usg_flex_200Match-

Node

AND

zyxel usg_flex_50_firmwareRange4.50–5.35

zyxel usg_flex_50Match-

Node

AND

zyxel usg_flex_50w_firmwareRange4.50–5.35

zyxel usg_flex_50wMatch-

Node

AND

zyxel usg_flex_500_firmwareRange4.50–5.35

zyxel usg_flex_500Match-

Node

AND

zyxel usg_flex_700_firmwareRange4.50–5.35

zyxel usg_flex_700Match-

Node

AND

zyxel vpn100_firmwareRange4.50–5.35

zyxel vpn100Match-

Node

AND

zyxel vpn1000_firmwareRange4.50–5.35

zyxel vpn1000Match-

Node

AND

zyxel vpn300_firmwareRange4.50–5.35

zyxel vpn300Match-

Node

AND

zyxel vpn50_firmwareRange4.50–5.35

zyxel vpn50Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps

17 Jun 2026 05:36Current

8High risk

Vulners AI Score8

CVSS 3.18.1

EPSS0.01291

SSVC

command injection vulnerability zyxel usg flex vpn series firmware remote attacker device configuration denial-of-service cve-2023-22913