Attacks exploiting critical Zyxel vulnerability underway

BleepingComputer reports that ongoing attacks leveraging a critical command injection vulnerability, tracked as CVE-2023-28771, impacting several Zyxel firewall and VPN devices have been confirmed by Rapid7.

attacks bleepingcomputer command command injection critical cve cve-2023-28771 devices device security exploiting firewall injection rapid7 reports vpn vulnerability vulnerability management zyxel