{"id":"CVE-2023-27992","state":"PUBLISHED","title":"The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS5","description":"The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request.","publishedAt":"2023-06-19T11:42:41.774Z","updatedAt":"2025-10-21T23:05:45.675Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"Zyxel"},"assigner":"Zyxel","products":["Zyxel NAS326 firmware","Zyxel NAS540 firmware","Zyxel NAS542 firmware"],"affected":[{"vendor":"Zyxel","product":"NAS326 firmware","defaultStatus":"unaffected","versions":[{"version":"< V5.21(AAZF.14)C0","status":"affected"}]},{"vendor":"Zyxel","product":"NAS540 firmware","defaultStatus":"unaffected","versions":[{"version":"< V5.21(AATB.11)C0","status":"affected"}]},{"vendor":"Zyxel","product":"NAS542 firmware","defaultStatus":"unaffected","versions":[{"version":"< V5.21(ABAG.11)C0","status":"affected"}]}],"references":["https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-authentication-command-injection-vulnerability-in-nas-products","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27992"],"weaknesses":["CWE-78"],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/27xxx/CVE-2023-27992.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-27992","state":"PUBLISHED","datePublished":"2023-06-19T11:42:41.774Z","dateUpdated":"2025-10-21T23:05:45.675Z","assignerShortName":"Zyxel","assignerOrgId":"96e50032-ad0d-4058-a115-4d2c13821f9f","dateReserved":"2023-03-09T08:44:12.874Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request."}],"affected":[{"vendor":"Zyxel","product":"NAS326 firmware","defaultStatus":"unaffected","versions":[{"version":"< V5.21(AAZF.14)C0","status":"affected"}]},{"vendor":"Zyxel","product":"NAS540 firmware","defaultStatus":"unaffected","versions":[{"version":"< V5.21(AATB.11)C0","status":"affected"}]},{"vendor":"Zyxel","product":"NAS542 firmware","defaultStatus":"unaffected","versions":[{"version":"< V5.21(ABAG.11)C0","status":"affected"}]}],"references":[{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-authentication-command-injection-vulnerability-in-nas-products"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Zyxel","orgId":"96e50032-ad0d-4058-a115-4d2c13821f9f","dateUpdated":"2023-06-19T11:42:41.774Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-authentication-command-injection-vulnerability-in-nas-products","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T12:23:30.801Z"}},{"title":"CISA ADP Vulnrichment","references":[{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27992","tags":["government-resource"]}],"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-27992","role":"CISA Coordinator","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-01-27T22:16:42.703923Z"}}},{"other":{"type":"kev","content":{"dateAdded":"2023-06-23","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27992"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-21T23:05:45.675Z"},"timeline":[{"time":"2023-06-23T00:00:00.000Z","lang":"en","value":"CVE-2023-27992 added to CISA KEV"}]}]}}}