PT-2023-3607 · Zyxel · Zyxel Usg Flex+1

Lê Hữu Quang Linh · Published 2023-05-26 · Updated 2023-07-26 · CVE-2023-34139

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 Zyxel VPN series firmware versions 4.20 through 5.36 Patch 2

Description A command injection vulnerability in the Free Time WiFi hotspot feature could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device. The vulnerability is related to the failure to neutralize special elements used in the operating system command, which may allow a remote attacker to execute arbitrary commands.

Recommendations For Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2, consider disabling the Free Time WiFi hotspot feature until a patch is available. For Zyxel VPN series firmware versions 4.20 through 5.36 Patch 2, restrict access to the Free Time WiFi hotspot feature to minimize the risk of exploitation. As a temporary workaround, avoid using the Free Time WiFi hotspot feature in both Zyxel USG FLEX and VPN series until the issue is resolved.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-03890

CVE-2023-34139

Affected Products

Zyxel Usg Flex

Zyxel Vpn

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-34139 · Security Note
• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-34139 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03890 · Security Note
• https://vuldb.com/ru/?id.234338 · Note
• https://t.me/cvenotify/55248 · Telegram Post
• https://t.me/cvenotify/54533 · Telegram Post
• https://t.me/cvenotify/54518 · Telegram Post