CVE-2023-35137 — Zyxel / NAS326 firmware

Description (CNA)

An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to obtain system information by sending a crafted URL to a vulnerable device.

Affected (CNA)

Vendor / product	Versions
Zyxel / NAS326 firmware	affected V5.21(AAZF.14)C0
Zyxel / NAS542 firmware	affected V5.21(ABAG.11)C0

CWE

CWE-287

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-authentication-bypass-and-command-injection-vulnerabilities-in-nas-products

ADP enrichment

CVE

No English description supplied.

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-authentication-bypass-and-command-injection-vulnerabilities-in-nas-products