CVE-2023-34138

🗓️ 17 Jul 2023 18:15:09Reported by [email protected]Type

nvd🔗 web.nvd.nist.gov👁 45 Views

Command injection in Zyxel ATP, USG FLEX, and USG20(W)-VP

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	Zyxel USG FLEX Command Execution	24 Jul 202300:00	–	bdu_fstec
CNNVD	Zyxel ATP 操作系统命令注入漏洞	17 Jul 202300:00	–	cnnvd
CVE	CVE-2023-34138	17 Jul 202317:31	–	cve
Cvelist	CVE-2023-34138	17 Jul 202317:31	–	cvelist
EUVD	EUVD-2023-38240	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel products	18 Jul 202300:00	–	ncsc
osv_cve	CVE-2023-34138	17 Jul 202318:15	–	osv_cve
Prion	Command injection	17 Jul 202318:15	–	prion
Positive Technologies	PT-2023-3691 · Zyxel · Zyxel Usg Flex Series +4	26 May 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2023-34138: Improper Neutralization of Special Elements used in an OS Command	17 Jul 202300:00	–	rapid7

NVD

Node

AND

zyxel usg_20w-vpn_firmwareRange4.60–5.37

zyxel usg_20w-vpnMatch-

Node

AND

zyxel usg_2200-vpn_firmwareRange4.60–5.37

zyxel usg_2200-vpnMatch-

Node

AND

zyxel usg_flex_100_firmwareRange4.60–5.37

zyxel usg_flex_100Match-

Node

AND

zyxel usg_flex_100w_firmwareRange4.60–5.37

zyxel usg_flex_100wMatch-

Node

AND

zyxel usg_flex_200_firmwareRange4.60–5.37

zyxel usg_flex_200Match-

Node

AND

zyxel usg_flex_50_firmwareRange4.60–5.37

zyxel usg_flex_50Match-

Node

AND

zyxel usg_flex_500_firmwareRange4.60–5.37

zyxel usg_flex_500Match-

Node

AND

zyxel usg_flex_50w_firmwareRange4.60–5.37

zyxel usg_flex_50wMatch-

Node

AND

zyxel usg_flex_700_firmwareRange4.60–5.37

zyxel usg_flex_700Match-

Node

AND

zyxel zywall_atp100_firmwareRange4.60–5.37

zyxel zywall_atp100Match-

Node

AND

zyxel zywall_atp100w_firmwareRange4.60–5.37

zyxel zywall_atp100wMatch-

Node

AND

zyxel zywall_atp200_firmwareRange4.60–5.37

zyxel zywall_atp200Match-

Node

AND

zyxel zywall_atp500_firmwareRange4.60–5.37

zyxel zywall_atp500Match-

Node

AND

zyxel zywall_atp700_firmwareRange4.60–5.37

zyxel zywall_atp700Match-

Node

AND

zyxel zywall_atp800_firmwareRange4.60–5.37

zyxel zywall_atp800Match-

Node

AND

zyxel zywall_vpn100_firmwareRange4.60–5.37

zyxel zywall_vpn100Match-

Node

AND

zyxel zywall_vpn2s_firmwareRange4.60–5.37

zyxel zywall_vpn2sMatch-

Node

AND

zyxel zywall_vpn300_firmwareRange4.60–5.37

zyxel zywall_vpn300Match-

Node

AND

zyxel zywall_vpn50_firmwareRange4.60–5.37

zyxel zywall_vpn50Match-

Node

AND

zyxel zywall_vpn_100_firmwareRange4.60–5.37

zyxel zywall_vpn_100Match-

Node

AND

zyxel zywall_vpn_300_firmwareRange4.60–5.37

zyxel zywall_vpn_300Match-

Node

AND

zyxel zywall_vpn_50_firmwareRange4.60–5.37

zyxel zywall_vpn_50Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers

17 Jun 2026 06:02Current

CVSS 3.18

EPSS0.00684

SSVC

command injection zyxel atp usg flex usg20(w)-vpn firmware vulnerability unauthenticated attacker lan-based os commands radius clients