Skip to main content

Atp100 Firmware CVE-2023-28771

CRITICAL
OS Command Injection (CWE-78)
2023-04-25 security@zyxel.com.tw
Command Injection Zyxel Atp100 Firmware Atp100W Firmware Atp200 Firmware Atp500 Firmware Atp700 Firmware Atp800 Firmware Usg Flex 100 Firmware Usg Flex 100W Firmware Usg Flex 200 Firmware Usg Flex 50 Firmware Usg Flex 500 Firmware Usg Flex 50W Firmware Usg Flex 700 Firmware Vpn100 Firmware Vpn1000 Firmware Vpn300 Firmware Vpn50 Firmware Zywall Usg 310 Firmware Zywall Usg 100 Firmware
9.8
CVSS 3.1 · Vendor: zyxel
Share

Severity by source

Vendor (zyxel) PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (zyxel) · only source for this CVE.

CVSS VectorVendor: zyxel

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Added to CISA KEV
Jul 14, 2026 - 04:22 CISA
CVE Published
Apr 25, 2023 - 02:15 cve.org
CRITICAL 9.8

DescriptionCVE.org

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.

AnalysisAI

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device. Affected products include: Zyxel Atp100 Firmware, Zyxel Atp100W Firmware, Zyxel Atp200 Firmware, Zyxel Atp500 Firmware, Zyxel Atp700 Firmware. Version information: through 4.73.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.

More in Atp100 Firmware

View all
CVE-2022-30525 CRITICAL POC
9.8 May 12

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
CVE-2022-0342 CRITICAL POC
9.8 Mar 28

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70
CVE-2020-29583 CRITICAL POC
9.8 Dec 22

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. Rated
CVE-2020-9054 CRITICAL POC
9.8 Mar 04

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command
CVE-2023-33010 CRITICAL
9.8 May 24

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Pa
CVE-2023-33009 CRITICAL
9.8 May 24

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Pat
CVE-2023-27991 HIGH
8.8 Apr 24

The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 th
CVE-2023-22916 HIGH
8.1 Apr 24

The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00
CVE-2022-26532 HIGH
7.8 May 24

A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 t
CVE-2022-26531 HIGH
7.8 May 24

Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versio
CVE-2023-22917 HIGH
7.5 Apr 24

A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32,
CVE-2023-22918 MEDIUM
6.5 Apr 24

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 t

Same weakness CWE-78 – OS Command Injection

View all
CVE-2014-6271 CRITICAL POC
9.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2025-64328 HIGH POC
8.6
CVE-2014-7169 CRITICAL POC
9.8
CVE-2017-6884 HIGH POC
8.8
CVE-2017-6077 CRITICAL POC
9.8

Same technique Command Injection

View all
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2015-2051 HIGH POC
8.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2025-64328 HIGH POC
8.6

Share

CVE-2023-28771 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy