CVE-2023-28771CISA KEV: Actively Exploited

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Published May 31, 2023·Updated May 31, 2023

Description

Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device.

Public Exploits & PoCs2 found

PoC: PoC-CVE-2023-28771

The script is designed to facilitate testing and exploration of the IKEv2 protocol in vulnerable devices, based on Rapid7's exploitation techniques.

PoC: CVE-2023-28771-PoC

PoC for CVE-2023-28771 based on Rapid7's excellent writeup

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free