Atp Series Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:zyxel:atp_series_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Zyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89) |
|---|---|
| Product | Atp Series Firmware (05e27dce-a9ec-5b69-ba20-b8f646c48974) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28767 |
vulnerable | 2026-06-08 06:02:35.573722 |
Details available
HIGH (8.8)
The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, USG FLEX 50(W) series firmware versions 5.10 through 5.36,
USG20(W)-VPN series firmware versions 5.10 through 5.36, and VPN series firmware versions 5.00 through 5.36. An unauthenticated, LAN-based attacker could leverage the vulnerability to inject some operating system (OS) commands into the device configuration data on an affected device when the cloud management mode is enabled.
Published: 2023-07-17T16:59:45.258Z
Updated: 2024-11-07T19:14:46.971Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.