PT-2023-3691 · Zyxel · Zyxel Atp Series+4

Lê Hữu Quang Linh

·

Published

2023-05-26

·

Updated

2023-07-26

·

CVE-2023-34138

CVSS v2.0

8.3

High

VectorAV:A/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2 Zyxel USG FLEX series firmware versions 4.60 through 5.36 Patch 2 Zyxel USG FLEX 50(W) series firmware versions 4.60 through 5.36 Patch 2 Zyxel USG20(W)-VPN series firmware versions 4.60 through 5.36 Patch 2 Zyxel VPN series firmware versions 4.60 through 5.36 Patch 2
Description A command injection vulnerability in the hotspot management feature could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the list of trusted RADIUS clients in advance. The vulnerability is related to the failure to neutralize special elements used in the operating system command.
Recommendations For Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel USG FLEX series firmware versions 4.60 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel USG FLEX 50(W) series firmware versions 4.60 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel USG20(W)-VPN series firmware versions 4.60 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel VPN series firmware versions 4.60 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. As a temporary workaround, consider restricting access to the hotspot management feature until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-03978
CVE-2023-34138

Affected Products

Zyxel Atp Series
Zyxel Usg Flex 50(W) Series
Zyxel Usg Flex Series
Zyxel Usg20(W)-Vpn Series
Zyxel Vpn Series