CVE-2023-27992 - The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request

Back Back to CVE browser

CRITICAL KEV

The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request

Published Jun 19, 2023 ·Due Jul 14, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 82.83%

Description

The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request.

Affected products

Vendor Zyxel Product NAS326 firmware Default
unaffected
- Version
  < V5.21(AAZF.14)C0
  Status
  affected
  Constraints
  -
Vendor Zyxel Product NAS540 firmware Default
unaffected
- Version
  < V5.21(AATB.11)C0
  Status
  affected
  Constraints
  -
Vendor Zyxel Product NAS542 firmware Default
unaffected
- Version
  < V5.21(ABAG.11)C0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Zyxel

NAS326 firmware

unaffected

Version	Status	Constraints
< V5.21(AAZF.14)C0	affected	-

Zyxel

NAS540 firmware

unaffected

Version	Status	Constraints
< V5.21(AATB.11)C0	affected	-

Zyxel

NAS542 firmware

unaffected

Version	Status	Constraints
< V5.21(ABAG.11)C0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31717
Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27992
government-resourceUS Government Resource
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-authentication-command-injection-vulnerability-in-nas-products
PatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31717		Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27992		government-resourceUS Government Resource
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-authentication-command-injection-vulnerability-in-nas-products		PatchVendor Advisory