Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-28771
HistoryApr 25, 2023 - 2:15 a.m.

Input validation

2023-04-2502:15:00
PRIOn knowledge base
www.prio-n.com
13

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.924 High

EPSS

Percentile

98.9%

JSON

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.

Related

nessus 2
thn 7
packetstorm 1
attackerkb 1
zdt 1
metasploit 1
cve 1
githubexploit 3
cisa_kev 1
rapid7blog 3
trellix 2
nessus
nessus
Zyxel USG < 5.36 / ATP < 5.36 / VPN < 5.36 / ZyWALL < 4.73 Patch 1 (RCE) (CVE-2023-28771)
2023-05-22 00:00:00
Zyxel Command Injection (CVE-2023-28771) (Direct Check)
2023-05-23 00:00:00
thn
thn
DDoS Botnets Hijacking Zyxel Devices to Launch Devastating Attacks
2023-07-21 09:03:00
Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks
2023-06-01 04:17:00
Zyxel Issues Critical Security Patches for Firewall and VPN Products
2023-05-25 14:43:00
packetstorm
packetstorm
Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution
2023-06-09 00:00:00
attackerkb
attackerkb
CVE-2023-28771
2023-05-23 00:00:00
zdt
zdt
Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution Exploit
2023-06-12 00:00:00
metasploit
metasploit
Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution
2023-05-22 17:03:58
cve
cve
CVE-2023-28771
2023-04-25 02:15:08
githubexploit
githubexploit
Exploit for OS Command Injection in Zyxel Atp100 Firmware
2023-06-03 15:40:50
Exploit for OS Command Injection in Zyxel Atp100 Firmware
2023-06-03 15:40:50
Exploit for OS Command Injection in Zyxel Atp100 Firmware
2023-05-23 02:37:39
cisa_kev
cisa_kev
Zyxel Multiple Firewalls OS Command Injection Vulnerability
2023-05-31 00:00:00
rapid7blog
rapid7blog
Widespread Exploitation of Zyxel Network Devices
2023-05-31 14:11:17
What’s New in InsightVM and Nexpose: Q2 2023 in Review
2023-06-29 13:00:00
Metasploit Weekly Wrap-Up
2023-06-16 20:40:51
trellix
trellix
The Bug Report - May 2023 Edition
2023-06-07 00:00:00
The Bug Report - May 2023 Edition
2023-06-07 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.924 High

EPSS

Percentile

98.9%

JSON
Related for PRION:CVE-2023-28771
nessus2thn7packetstorm1attackerkb1zdt1metasploit1cve1githubexploit3cisa_kev1rapid7blog3trellix2