CVE-2023-6398

zyxel atp100 firmware, zyxel atp100w firmware, zyxel atp200 firmware +17 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-6398

Katalog CVE

CVSS 7.2 · High EPSS 1,3%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada zyxel atp100 firmware, zyxel atp100w firmware +18 lainnya. Skor CVSS 3.1 7.2 (High) menurut zyxel.com.tw.

Deskripsi (NVD)

A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37 Patch 1, USG20(W)-VPN series firmware versions from 4.16 through 5.37 Patch 1, USG FLEX H series firmware versions from 1.10 through 1.10 Patch 1, NWA50AX firmware versions through 6.29(ABYW.3), WAC500 firmware versions through 6.65(ABVS.1), WAX300H firmware versions through 6.60(ACHF.1), and WBE660S firmware versions through 6.65(ACGG.1) could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device via FTP.

Rincian

Terbit di NVD
20 Februari 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.2 (High), sumber zyxel.com.tw
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
EPSS (30 hari)
1,3% peluang dieksploitasi; lebih tinggi dari 70,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zyxel atp100 firmware Versi 4.32 hingga sebelum 5.37
zyxel atp100 firmware Versi 5.37
zyxel atp100 firmware Versi 5.37 patch1
zyxel atp100w firmware Versi 4.32 hingga sebelum 5.37
zyxel atp100w firmware Versi 5.37
zyxel atp100w firmware Versi 5.37 patch1
zyxel atp200 firmware Versi 4.32 hingga sebelum 5.37
zyxel atp200 firmware Versi 5.37
zyxel atp200 firmware Versi 5.37 patch1
zyxel atp500 firmware Versi 4.32 hingga sebelum 5.37
zyxel atp500 firmware Versi 5.37
zyxel atp500 firmware Versi 5.37 patch1
zyxel atp700 firmware Versi 4.32 hingga sebelum 5.37
zyxel atp700 firmware Versi 5.37
zyxel atp700 firmware Versi 5.37 patch1
zyxel atp800 firmware Versi 4.32 hingga sebelum 5.37
zyxel atp800 firmware Versi 5.37
zyxel atp800 firmware Versi 5.37 patch1
zyxel usg flex 100 firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 100 firmware Versi 5.37
zyxel usg flex 100 firmware Versi 5.37 patch1
zyxel usg flex 100ax firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 100ax firmware Versi 5.37
zyxel usg flex 100ax firmware Versi 5.37 patch1
zyxel usg flex 100h firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 100h firmware Versi 5.37
zyxel usg flex 100h firmware Versi 5.37 patch1
zyxel usg flex 100w firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 100w firmware Versi 5.37
zyxel usg flex 100w firmware Versi 5.37 patch1
zyxel usg flex 200 firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 200 firmware Versi 5.37
zyxel usg flex 200 firmware Versi 5.37 patch1
zyxel usg flex 200h firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 200h firmware Versi 5.37
zyxel usg flex 200h firmware Versi 5.37 patch1
zyxel usg flex 200hp firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 200hp firmware Versi 5.37
zyxel usg flex 200hp firmware Versi 5.37 patch1
zyxel usg flex 50 firmware Versi 4.16 hingga sebelum 5.37
zyxel usg flex 50 firmware Versi 5.37
zyxel usg flex 50 firmware Versi 5.37 patch1
zyxel usg flex 500 firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 500 firmware Versi 5.37
zyxel usg flex 500 firmware Versi 5.37 patch1
zyxel usg flex 500h firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 500h firmware Versi 5.37
zyxel usg flex 500h firmware Versi 5.37 patch1
zyxel usg flex 50w firmware Versi 4.16 hingga sebelum 5.37
zyxel usg flex 50w firmware Versi 5.37
zyxel usg flex 50w firmware Versi 5.37 patch1
zyxel usg flex 700 firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 700 firmware Versi 5.37
zyxel usg flex 700 firmware Versi 5.37 patch1
zyxel usg flex 700h firmware Versi 4.50 hingga sebelum 5.37
zyxel usg flex 700h firmware Versi 5.37
zyxel usg flex 700h firmware Versi 5.37 patch1
zyxel usg20-vpn firmware Versi 4.16 hingga sebelum 5.37
zyxel usg20-vpn firmware Versi 5.37
zyxel usg20-vpn firmware Versi 5.37 patch1

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 85 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.