CVE-2023-6398

published 2024-02-20

CVE-2023-6398: A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX…

Priority P3 48 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37 Patch 1, USG20(W)-VPN series firmware versions from 4.16 through 5.37 Patch 1,

USG FLEX H series firmware versions from 1.10 through 1.10 Patch 1,

NWA50AX firmware versions through 6.29(ABYW.3), WAC500 firmware versions through 6.65(ABVS.1), WAX300H firmware versions through 6.60(ACHF.1), and WBE660S firmware versions through 6.65(ACGG.1) could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device via FTP.

Affected

72 ranges · showing 25

Vendor	Product	Version range	Fixed in
zyxel	atp100_firmware	—	—
zyxel	atp100_firmware	>= 4.32 < 5.37	5.37
zyxel	atp100w_firmware	—	—
zyxel	atp100w_firmware	>= 4.32 < 5.37	5.37
zyxel	atp200_firmware	—	—
zyxel	atp200_firmware	>= 4.32 < 5.37	5.37
zyxel	atp500_firmware	—	—
zyxel	atp500_firmware	>= 4.32 < 5.37	5.37
zyxel	atp700_firmware	—	—
zyxel	atp700_firmware	>= 4.32 < 5.37	5.37
zyxel	atp800_firmware	—	—
zyxel	atp800_firmware	>= 4.32 < 5.37	5.37
zyxel	atp_series_firmware	—	—
zyxel	nwa110ax_firmware	< 6.70\(abtg.2\)	6.70\(abtg.2\)
zyxel	nwa1123acv3_firmware	< 6.70\(abvt.1\)	6.70\(abvt.1\)
zyxel	nwa210ax_firmware	< 6.70\(abtd.2\)	6.70\(abtd.2\)
zyxel	nwa220ax-6e_firmware	< 6.70\(acco.1\)	6.70\(acco.1\)
zyxel	nwa50ax-pro_firmware	< 6.80\(acge.0\)	6.80\(acge.0\)
zyxel	nwa50ax_firmware	< 6.29(ABYW.4)	6.29(ABYW.4)
zyxel	nwa50ax_firmware	< 6.29\(abyw.4\)	6.29\(abyw.4\)
zyxel	nwa55axe_firmware	< 6.29\(abzl.4\)	6.29\(abzl.4\)
zyxel	nwa90ax-pro_firmware	< 6.80\(acgf.0\)	6.80\(acgf.0\)
zyxel	nwa90ax_firmware	< 6.29\(accv.4\)	6.29\(accv.4\)
zyxel	uos	—	—
zyxel	usg20-vpn_firmware	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78