Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

Zyxel has released patches to address 15 security issues impacting network-attached storage NAS, firewall, and access point AP devices, including three critical flaws that could lead to authentication bypass and command injection. The three vulnerabilities are listed below - CVE-2023-35138 CVSS...

CVE-2023-35137

The CVE-2023-35137 issue affects Zyxel NAS326 and NAS542 via an improper authentication flaw in the login/authentication component, enabling an unauthenticated attacker to obtain system information by sending a crafted URL. Affected firmware is Zyxel NAS326 V5.21(AAZF.14)C0 and NAS542 V5.21(ABAG....