CVE-2023-27992: Zyxel Multiple Network-Attached Storage (NAS) Devices: aktif olarak istismar edilen açık

Açıklama (NVD)

Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.

Özet bilgiler

EPSS

%82,26 (yüzdelik 100)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2023-06-23 · Son tarih: 2023-07-14

Gerekli aksiyon: Apply updates per vendor instructions.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu