Zyxel CVE-2023-28771 – Command Injection

Improper error message handling in Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls creates a vulnerability that can be exploited by an unauthorized attacker. By sending manipulated packets to a targeted device, the attacker can remotely execute operating system commands.

Affected Products:

Patches are available at the Zyxel website, click the Reference button