CVE-2023-28767

🗓️ 17 Jul 2023 17:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 10 Views

The Zyxel ATP series firmware (5.10-5.36) and USG FLEX series firmware (5.00-5.36) allows unauthenticated LAN-based attacker to execute OS commands via cloud management mod

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Cloud Management mode of the Zyxel USG FLEX, USG FLEX 50(W), USG20(W)-VPN, ATP, and VPN software allows a hacker to execute arbitrary commands.	24 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-28767	17 Jul 202320:40	–	circl
CNNVD	Zyxel ATP 操作系统命令注入漏洞	17 Jul 202300:00	–	cnnvd
CVE	CVE-2023-28767	17 Jul 202316:59	–	cve
Cvelist	CVE-2023-28767	17 Jul 202316:59	–	cvelist
EUVD	EUVD-2023-32402	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel products	18 Jul 202300:00	–	ncsc
OSV	CVE-2023-28767	17 Jul 202317:15	–	osv
Prion	Input validation	17 Jul 202317:15	–	prion
Positive Technologies	PT-2023-3687 · Zyxel · Zyxel Usg Flex Series +4	23 Mar 202300:00	–	ptsecurity

NVD

Node

zyxel usg_2200-vpn_firmwareRange5.00–5.37

AND

zyxel usg_2200-vpnMatch-

Node

zyxel usg_flex_100_firmwareRange5.00–5.37

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_100w_firmwareRange5.00–5.37

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_200_firmwareRange5.00–5.37

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_50_firmwareRange5.00–5.37

AND

zyxel usg_flex_50Match-

Node

zyxel usg_flex_500_firmwareRange5.00–5.37

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_50w_firmwareRange5.00–5.37

AND

zyxel usg_flex_50wMatch-

Node

zyxel usg_flex_700_firmwareRange5.00–5.37

AND

zyxel usg_flex_700Match-

Node

zyxel zywall_vpn100_firmwareRange5.00–5.37

AND

zyxel zywall_vpn100Match-

Node

zyxel zywall_vpn2s_firmwareRange5.00–5.37

AND

zyxel zywall_vpn2sMatch-

Node

zyxel zywall_vpn300_firmwareRange5.00–5.37

AND

zyxel zywall_vpn300Match-

Node

zyxel zywall_vpn50_firmwareRange5.00–5.37

AND

zyxel zywall_vpn50Match-

Node

zyxel zywall_vpn_100_firmwareRange5.00–5.37

AND

zyxel zywall_vpn_100Match-

Node

zyxel zywall_vpn_300_firmwareRange5.00–5.37

AND

zyxel zywall_vpn_300Match-

Node

zyxel zywall_vpn_50_firmwareRange5.00–5.37

AND

zyxel zywall_vpn_50Match-

Node

zyxel usg_20w-vpn_firmwareRange5.10–5.37

AND

zyxel usg_20w-vpnMatch-

Node

zyxel zywall_atp100_firmwareRange5.10–5.37

AND

zyxel zywall_atp100Match-

Node

zyxel zywall_atp100w_firmwareRange5.10–5.37

AND

zyxel zywall_atp100wMatch-

Node

zyxel zywall_atp200_firmwareRange5.10–5.37

AND

zyxel zywall_atp200Match-

Node

zyxel zywall_atp500_firmwareRange5.10–5.37

AND

zyxel zywall_atp500Match-

Node

zyxel zywall_atp700_firmwareRange5.10–5.37

AND

zyxel zywall_atp700Match-

Node

zyxel zywall_atp800_firmwareRange5.10–5.37

AND

zyxel zywall_atp800Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers

17 Jun 2026 05:48Current

CVSS 3.18.8

EPSS0.00361

zyxel atp usg flex firmware os commands lan-based attacker cloud management