cveboard RSS feed

CVE-2023-27991

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker to execute some OS commands remotely.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ATP series firmware

Vendor
Zyxel
Product
ATP series firmware
Platforms
Unknown
Default status
Unknown
ATP series firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.32 through 5.35affectedUnavailableUnavailableUnavailableNone listed

USG FLEX series firmware

Vendor
Zyxel
Product
USG FLEX series firmware
Platforms
Unknown
Default status
Unknown
USG FLEX series firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.50 through 5.35affectedUnavailableUnavailableUnavailableNone listed

USG FLEX 50(W) firmware

Vendor
Zyxel
Product
USG FLEX 50(W) firmware
Platforms
Unknown
Default status
Unknown
USG FLEX 50(W) firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.16 through 5.35affectedUnavailableUnavailableUnavailableNone listed

USG20(W)-VPN firmware

Vendor
Zyxel
Product
USG20(W)-VPN firmware
Platforms
Unknown
Default status
Unknown
USG20(W)-VPN firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.16 through 5.35affectedUnavailableUnavailableUnavailableNone listed

VPN series firmware

Vendor
Zyxel
Product
VPN series firmware
Platforms
Unknown
Default status
Unknown
VPN series firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.30 through 5.35affectedUnavailableUnavailableUnavailableNone listed