Approved changes feed: RSS · Atom

cpe:2.3:a:zyxel:nas540_firmware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductNas540 Firmware (20bb646b-73ec-5542-8bb5-703e388fcb16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27992 vulnerable 2026-06-08 05:57:42.737928 Details available
CRITICAL (9.8)
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request.
Published: 2023-06-19T11:42:41.774Z
Updated: 2025-10-21T23:05:45.675Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.