CVE-2023-34141 Command injection in ATP series firmware
Unauthenticated LAN attackers can execute OS commands on Zyxel devices by tricking admins into adding their IP to the managed AP list.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-34141?
CVE-2023-34141 is a high-severity command injection vulnerability in Zyxel ATP series firmware, published on 17 Jul 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.00 through 5.36 Patch 2, VPN series firmware versions 5.00 through 5.36 Patch 2, NXC2500 firmware versions 6.10(AAIG.0) through 6.10(AAIG.3), and NXC5500 firmware versions 6.10(AAOS.0) through 6.10(AAOS.4), could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the managed AP list in advance.
Weakness: CWE-78
Which versions are affected by CVE-2023-34141?
It affects 24 products.
Products include Zyxel Nxc2500 Firmware, Zyxel Nxc5500 Firmware, Zyxel Usg 20w-Vpn Firmware, Zyxel Usg 2200-Vpn Firmware, Zyxel Usg Flex 100 Firmware, Zyxel Usg Flex 100w Firmware and 18 more.
How do I fix CVE-2023-34141?
No fix has been published for CVE-2023-34141 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2023-34141 being exploited?
There is no known exploitation of CVE-2023-34141 in the wild and no public exploit code.
Other vulnerabilities in Zyxel ATP series firmware
Sources
Also known as GHSA-2hgc-m6qj-p4p4.