- Vendor / Project
- Zyxel
- Product
- Multiple Firewalls
- Date added
- May 31, 2023
- Due date
- Jun 21, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-78
Description
Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device.
Required action
Apply updates per vendor instructions.