Monday, May 12, 2025
HomeVulnerabilityZyxel Command Injection Vulnerability Let Attackers Execute OS Commands

Zyxel Command Injection Vulnerability Let Attackers Execute OS Commands

Published on

SIEM as a Service

Follow Us on Google News

Zyxel has been one of the world’s leading networking products manufacturing companies and one of the top companies in the telecommunications industry. 

The company has customers worldwide, including the United States, the United Kingdom, France, and India.

Zyxel NAS (Network-Attached Storage) devices were recently discovered with a pre-authentication command injection vulnerability that can allow a remote attacker to execute operating system commands by sending malicious HTTP requests.

- Advertisement - Google News

CVE-2023-27992: Pre-authentication Command Injection Vulnerability in Zyxel NAS Products

This vulnerability exists in some of the products inside the Zyxel NAS firmware that can allow an unauthenticated attacker to execute OS commands through crafted HTTP requests.

Two Security researchers named Andrej Zaujec from NCSC-FI and Maxim Suslov discovered this command injection vulnerability. The vulnerability receives a CVSS Score of 9.8 (Critical).

Affected Products

Affected modelAffected versionPatch availability
NAS326V5.21(AAZF.13)C0 and earlierV5.21(AAZF.14)C0
NAS540V5.21(AATB.10)C0 and earlierV5.21(AATB.11)C0
NAS542V5.21(ABAG.10)C0 and earlierV5.21(ABAG.11)C0

Users of Zyxel NAS products are advised to update to the latest software version to prevent attackers from exploiting this vulnerability. 

Zyxel, a subsidiary of Unizyx Holding corporation, has an overall revenue of 32 billion Taiwanese Dollars as of 2021 and has employees of more than 650+ worldwide. The company specializes in 5G/4G NR, DSL, modems, VoIP telephones, and other telecommunication products.

The company was established in 1989 and has made several breakthroughs by introducing World’s 1st ADSL2+ gateway (2004), palm-sized portable firewall (2005), Analog/Digital.

“AI-based email security measures Protect your business From Email Threats!” – .

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Lumma Stealer Upgraded with PowerShell Tools and Advanced Evasion Techniques

Sophos Managed Detection and Response (MDR) in September 2024, the notorious Lumma Stealer malware...

New Noodlophile Malware Spreads Through Fake AI Video Generation Platforms

Cybercriminals have unleashed a new malware campaign using fake AI video generation platforms as...

Kimsuky Hacker Group Deploys New Phishing Techniques and Malware Campaigns

The North Korean state-sponsored Advanced Persistent Threat (APT) group Kimsuky, also known as “Black...

APT37 Hackers Use Weaponized LNK Files and Dropbox for Command-and-Control Operations

The North Korean state-sponsored hacking group APT37, also known as ScarCruft, launched a spear...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

VMware Tools Vulnerability Allows Attackers to Modify Files and Launch Malicious Operations

Broadcom-owned VMware has released security patches addressing a moderate severity insecure file handling vulnerability...

Mitel SIP Phone Flaws Allow Attackers to Inject Malicious Commands

A pair of vulnerabilities in Mitel’s 6800 Series, 6900 Series, and 6900w Series SIP...

PoC Code Published for Linux nftables Security Vulnerability

Security researchers have published proof-of-concept (PoC) exploit code for CVE-2024-26809, a high-severity double-free vulnerability in...