CVE-2023-28771Zyxel Multiple Firewalls OS Command Injection Vulnerability
Bekannt ausgenutzt — Zyxel Multiple Firewalls OS Command Injection Vulnerability
CISA hat am 31.05.2023 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 21.06.2023.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-28771
Beschreibung
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Zyxel | ATP series firmware | 4.60 through 5.35 | |
| zyxel | atp100 firmware | 4.60 – < 5.36 | |
| zyxel | atp100w firmware | 4.60 – < 5.35 | |
| zyxel | atp200 firmware | 4.60 – < 5.36 | |
| zyxel | atp500 firmware | 4.60 – < 5.36 | |
| zyxel | atp700 firmware | 4.60 – < 5.36 | |
| zyxel | atp800 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 100 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 100w firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 200 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 50 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 500 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 50w firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 700 firmware | 4.60 – < 5.36 | |
| Zyxel | USG FLEX series firmware | 4.60 through 5.35 | |
| Zyxel | VPN series firmware | 4.60 through 5.35 | |
| zyxel | vpn100 firmware | 4.60 – < 5.36 | |
| zyxel | vpn1000 firmware | 4.60 – < 5.36 | |
| zyxel | vpn300 firmware | 4.60 – < 5.36 | |
| zyxel | vpn50 firmware | 4.60 – < 5.36 | |
| zyxel | zywall usg 100 firmware | 4.60 – < 4.73 | |
| zyxel | zywall usg 310 firmware | 4.60 – < 4.73 | |
| Zyxel | ZyWALL/USG series firmware | 4.60 through 4.73 |
Referenzen und Patches
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-inject… Vendor Advisory
- http://packetstormsecurity.com/files/172820/Zyxel-IKE-Packet-Decoder-Unauthenticated-Remote-Code-Execution.html ExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28771 US Government Resource
CPE-Treffer (NVD) (21)
cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.35cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:zywall_usg_310_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 4.73cpe:2.3:o:zyxel:zywall_usg_310_firmware:4.73:-:*:*:*:*:*:*cpe:2.3:o:zyxel:zywall_usg_100_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 4.73cpe:2.3:o:zyxel:zywall_usg_100_firmware:4.73:-:*:*:*:*:*:*