NF
Product
NAS542 firmware
On CISA KEVExploited in the wild
18
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 7Medium 2Low 0
Watch
Add NAS542 firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-37928 | 8.8 | Nov 30 | A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could… Affected: through 5.21\(abag.11\)c0 |
| CVE-2023-37927 | 8.8 | Nov 30 | The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow… Affected: through 5.21\(abag.11\)c0 |
| CVE-2020-13365 | 8.8 | Aug 6 | Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session… Affected: before v5.21\(abag.6\)c0 |
| CVE-2020-13364 | 8.8 | Aug 6 | A backdoor in certain Zyxel products allows remote TELNET access via a CGI script Affected: before v5.21\(abag.6\)c0 |
| CVE-2023-35137 | 7.5 | Nov 30 | An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could… Affected: through 5.21\(abag.11\)c0 |
| CVE-2023-5372 | 7.2 | Jan 30 | The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versions through V5.21(ABAG.12)C0 could… Affected: before 5.21\(abag.13\)c0 |
| CVE-2023-27988 | 7.2 | May 30 | The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an authenticated attacker with administrator… Affected: before 5.21\(abag.10\)c0 |
Showing 7