CVE-2023-28771Zyxel Multiple Firewalls OS Command Injection Vulnerability
Explotación conocida — Zyxel Multiple Firewalls OS Command Injection Vulnerability
CISA confirmó el 31.05.2023 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 21.06.2023.
Acción requerida: Apply updates per vendor instructions. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-28771
Descripción
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Zyxel | ATP series firmware | 4.60 through 5.35 | |
| zyxel | atp100 firmware | 4.60 – < 5.36 | |
| zyxel | atp100w firmware | 4.60 – < 5.35 | |
| zyxel | atp200 firmware | 4.60 – < 5.36 | |
| zyxel | atp500 firmware | 4.60 – < 5.36 | |
| zyxel | atp700 firmware | 4.60 – < 5.36 | |
| zyxel | atp800 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 100 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 100w firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 200 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 50 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 500 firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 50w firmware | 4.60 – < 5.36 | |
| zyxel | usg flex 700 firmware | 4.60 – < 5.36 | |
| Zyxel | USG FLEX series firmware | 4.60 through 5.35 | |
| Zyxel | VPN series firmware | 4.60 through 5.35 | |
| zyxel | vpn100 firmware | 4.60 – < 5.36 | |
| zyxel | vpn1000 firmware | 4.60 – < 5.36 | |
| zyxel | vpn300 firmware | 4.60 – < 5.36 | |
| zyxel | vpn50 firmware | 4.60 – < 5.36 | |
| zyxel | zywall usg 100 firmware | 4.60 – < 4.73 | |
| zyxel | zywall usg 310 firmware | 4.60 – < 4.73 | |
| Zyxel | ZyWALL/USG series firmware | 4.60 through 4.73 |
Referencias y parches
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-inject… Vendor Advisory
- http://packetstormsecurity.com/files/172820/Zyxel-IKE-Packet-Decoder-Unauthenticated-Remote-Code-Execution.html ExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28771 US Government Resource
Coincidencias CPE (NVD) (21)
cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.35cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 5.36cpe:2.3:o:zyxel:zywall_usg_310_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 4.73cpe:2.3:o:zyxel:zywall_usg_310_firmware:4.73:-:*:*:*:*:*:*cpe:2.3:o:zyxel:zywall_usg_100_firmware:*:*:*:*:*:*:*:*≥ 4.60 < 4.73cpe:2.3:o:zyxel:zywall_usg_100_firmware:4.73:-:*:*:*:*:*:*