Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

Zyxel has released patches to address 15 security issues impacting network-attached storage NAS, firewall, and access point AP devices, including three critical flaws that could lead to authentication bypass and command injection. The three vulnerabilities are listed below - CVE-2023-35138 CVSS...

CVE-2023-4473

A command injection vulnerability exists in the web server of Zyxel NAS326 (firmware version V5.21(AAZF.14)C0 ) and NAS542 (firmware version V5.21(ABAG.11)C0 ) and earlier versions. The root cause is the lack of measures to neutralize special elements used in operating system commands. This allow...