Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-34139


A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device.


Published

2023-07-17T18:15:09.607

Last Modified

2024-11-21T08:06:37.840

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
  • Type: Primary
    CWE-78

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System zyxel usg_2200-vpn_firmware < 5.37 Yes
Hardware zyxel usg_2200-vpn - No
Operating System zyxel usg_flex_100_firmware < 5.37 Yes
Hardware zyxel usg_flex_100 - No
Operating System zyxel usg_flex_100w_firmware < 5.37 Yes
Hardware zyxel usg_flex_100w - No
Operating System zyxel usg_flex_200_firmware < 5.37 Yes
Hardware zyxel usg_flex_200 - No
Operating System zyxel usg_flex_50_firmware < 5.37 Yes
Hardware zyxel usg_flex_50 - No
Operating System zyxel usg_flex_500_firmware < 5.37 Yes
Hardware zyxel usg_flex_500 - No
Operating System zyxel usg_flex_50w_firmware < 5.37 Yes
Hardware zyxel usg_flex_50w - No
Operating System zyxel usg_flex_700_firmware < 5.37 Yes
Hardware zyxel usg_flex_700 - No
Operating System zyxel zywall_vpn100_firmware < 5.37 Yes
Hardware zyxel zywall_vpn100 - No
Operating System zyxel zywall_vpn2s_firmware < 5.37 Yes
Hardware zyxel zywall_vpn2s - No
Operating System zyxel zywall_vpn300_firmware < 5.37 Yes
Hardware zyxel zywall_vpn300 - No
Operating System zyxel zywall_vpn50_firmware < 5.37 Yes
Hardware zyxel zywall_vpn50 - No
Operating System zyxel zywall_vpn_100_firmware < 5.37 Yes
Hardware zyxel zywall_vpn_100 - No
Operating System zyxel zywall_vpn_300_firmware < 5.37 Yes
Hardware zyxel zywall_vpn_300 - No
Operating System zyxel zywall_vpn_50_firmware < 5.37 Yes
Hardware zyxel zywall_vpn_50 - No

References