RaqibCTI
CVE

CVE-2023-27992

P2
Zyxel Multiple NAS Devices Command Injection Vulnerability
Zyxel · Multiple Network-Attached Storage (NAS) Devices
Date added (CISA)
2023-06-23
Remediation due
2023-07-14
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.

Source: NVD ↗ · CISA KEV Catalog ↗