Zyxel Releases Urgent Security Updates for Critical Vulnerability in NAS Devices
Zyxel Releases Urgent Security Updates for Critical Vulnerability in NAS Devices
20 June 2023
Zyxel has rolled out security updates to address a critical security flaw in its network-attached storage (NAS) devices that could result in the execution of arbitrary commands on affected systems.
Tracked as CVE-2023-27992 (CVSS score: 9.8), the issue has been described as a pre-authentication command injection vulnerability.
"The pre-authentication command injection vulnerability in some Zyxel