CVE-2023-34138
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
CVE-2023-34138 describes a command injection vulnerability in the hotspot management feature of the Zyxel ATP, USG FLEX, and VPN series firmware versions 4.60 through 5.36 Patch 2. A LAN-based attacker could execute OS commands on an affected device if they trick an authorized administrator into adding their IP address to the list of trusted RADIUS clients.
Risk Assessment
This vulnerability poses a risk of unauthorized access to the system, potentially leading to serious security breaches within the organization. An attacker could gain control over the device, threatening the integrity and confidentiality of data.
Recommendation
It is recommended to update the firmware to the latest version that does not contain this vulnerability. Additionally, access to the hotspot management feature should be restricted to trusted administrators only.
Other vulnerabilities in Zyxel ATP series, USG FLEX series, USG FLEX 50(W) series, USG20(W)-VPN series, VPN series firmware versions 4.60 through 5.36 Patch 2
Original NVD description (English source)
A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.60 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 4.60 through 5.36 Patch 2, and VPN series firmware versions 4.60 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the list of trusted RADIUS clients in advance.