Skip to content
OpenAdvisories
High · 7.5 CVE-2023-35137 EUVD-2023-39167GHSA-vpqc-4qh3-4hw3

An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firm…

Published Nov 30, 2023 · Updated Aug 2, 2024 · Assigned by Zyxel

Description

An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to obtain system information by sending a crafted URL to a vulnerable device.

Affected products

VendorProductAffectedFixed
Zyxel NAS326 firmware V5.21(AAZF.14)C0 —
Zyxel NAS542 firmware V5.21(ABAG.11)C0 —

References