CVE-2023-28771

🗓️ 25 Apr 2023 02:15:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 29 Views

Zyxel devices firmware vulnerability

Reporter	Title	Published	Views	Family All 44
0day.today	Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution Exploit	12 Jun 202300:00	–	zdt
GithubExploit	Exploit for OS Command Injection in Zyxel Atp100_Firmware	23 May 202302:37	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Atp100_Firmware	23 May 202302:37	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Zyxel Atp100_Firmware	23 May 202302:37	–	githubexploit
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2023-28771	25 Apr 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of microprogrammed software in network devices such as Zyxel ZyWALL/USG, VPN, USG FLEX, ATP allows a perpetrator to execute arbitrary commands.	24 May 202300:00	–	bdu_fstec
Circl	CVE-2023-28771	25 Apr 202307:24	–	circl
CISA KEV Catalog	Zyxel Multiple Firewalls OS Command Injection Vulnerability	31 May 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	31 May 202312:00	–	cisa

NVD

Node

AND

zyxel atp100_firmwareRange4.60–5.36

zyxel atp100Match-

Node

AND

zyxel atp100w_firmwareRange4.60–5.35

zyxel atp100wMatch-

Node

AND

zyxel atp200_firmwareRange4.60–5.36

zyxel atp200Match-

Node

AND

zyxel atp500_firmwareRange4.60–5.36

zyxel atp500Match-

Node

AND

zyxel atp700_firmwareRange4.60–5.36

zyxel atp700Match-

Node

AND

zyxel atp800_firmwareRange4.60–5.36

zyxel atp800Match-

Node

AND

zyxel usg_flex_100_firmwareRange4.60–5.36

zyxel usg_flex_100Match-

Node

AND

zyxel usg_flex_100w_firmwareRange4.60–5.36

zyxel usg_flex_100wMatch-

Node

AND

zyxel usg_flex_200_firmwareRange4.60–5.36

zyxel usg_flex_200Match-

Node

AND

zyxel usg_flex_50_firmwareRange4.60–5.36

zyxel usg_flex_50Match-

Node

AND

zyxel usg_flex_500_firmwareRange4.60–5.36

zyxel usg_flex_500Match-

Node

AND

zyxel usg_flex_50w_firmwareRange4.60–5.36

zyxel usg_flex_50wMatch-

Node

AND

zyxel usg_flex_700_firmwareRange4.60–5.36

zyxel usg_flex_700Match-

Node

AND

zyxel vpn100_firmwareRange4.60–5.36

zyxel vpn100Match-

Node

AND

zyxel vpn1000_firmwareRange4.60–5.36

zyxel vpn1000Match-

Node

AND

zyxel vpn300_firmwareRange4.60–5.36

zyxel vpn300Match-

Node

AND

zyxel vpn50_firmwareRange4.60–5.36

zyxel vpn50Match-

Node

AND

OR

zyxel zywall_usg_310_firmwareRange4.60–4.73

zyxel zywall_usg_310_firmwareMatch4.73-

zyxel zywall_usg_310Match-

Node

AND

OR

zyxel zywall_usg_100_firmwareRange4.60–4.73

zyxel zywall_usg_100_firmwareMatch4.73-

zyxel zywall_usg_100Match-

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls
packetstormsecurity	www.packetstormsecurity.com/files/172820/Zyxel-IKE-Packet-Decoder-Unauthenticated-Remote-Code-Execution.html

17 Jun 2026 05:48Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

EPSS0.99284

cve-2023-28771 improper error message handling zyxel zywall usg series vpn series usg flex series atp series remote command execution