Critical 1 exploited CVE WID-SEC-2023-1070 9 CVEs

Zyxel Firewalls: Mehrere Schwachstellen

Published Apr 24, 2023 · Updated Jun 1, 2023 · Revision 3 · de-DE

Vendor: Zyxel Product: Firewall Product: Firewall < ZLD V4.73 Patch 1 Product: Firewall < ZLD V5.36

Summary

Ein Angreifer kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service zu verursachen, einen Cross Site Scripting Angriff durchzuführen oder die Konfiguration zu manipulieren.

Product

Zyxel ist ein Hersteller von Netzwerkkomponenten, u.a. von Firewalls.

Vulnerabilities 9

Critical 9.8

CVE-2023-28771 Exploited Public exploit EPSS 99%

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 25, 2023
KEV May 31, 2023
High 8.8

CVE-2023-27991

The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 t…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 24, 2023
High 8.1

CVE-2023-22913

A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX serie…

Zyxel USG FLEX series firmware VPN series Firmware Network devices

Apr 24, 2023
High 8.1

CVE-2023-22916

The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.0…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 24, 2023
High 7.5

CVE-2023-22915

A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50…

Zyxel USG FLEX series firmware VPN series Firmware USG FLEX 50(W) firmware Network devices

Apr 24, 2023
High 7.5

CVE-2023-22917

A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 24, 2023
High 7.2

CVE-2023-22914

A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 t…

Zyxel USG FLEX series firmware VPN series Firmware Network devices

Apr 24, 2023
Medium 6.5

CVE-2023-22918

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 …

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 24, 2023
Medium 4.8

CVE-2023-27990

The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series f…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 24, 2023

Revision history

2023-06-01 #3
CVE-2023-28771 aktiv ausgenutzt
2023-05-22 #2
PoC aufgenommen
2023-04-24 #1
Initiale Fassung

References

CISA Alert vom 2023-06-01
https://www.cisa.gov/news-events/alerts/2023/05/31/cisa-adds-one-known-exploited-vulnerability-catalog
PoC auf AttackerKB vom 2023-05-22
https://attackerkb.com/topics/N3i8dxpFKS/cve-2023-28771/rapid7-analysis
Zyxel Security Advisory vom 2023-04-24
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-and-post-authentication-command-injection-vulnerability-in-firewalls
Zyxel Security Advisory vom 2023-04-24
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls
Zyxel Security Advisory vom 2023-04-24
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps