CVE-2023-28771: Zyxel Multiple Firewalls: aktif olarak istismar edilen açık

Açıklama (NVD)

Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device.

Özet bilgiler

EPSS

%99,28 (yüzdelik 100)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2023-05-31 · Son tarih: 2023-06-21

Gerekli aksiyon: Apply updates per vendor instructions.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu