Patch Alert! Critical Command Injection Flaw Discovered in NAS Devices

Zyxel announced patches are available and should be applied immediately for the newly discovered vulnerability CVE-2023-27992. The flaw is a pre-authentication command injection issue that affects some of the network-attached storage (NAS) versions. More about CVE-2023-27992 According to the Common Vulnerability Scoring System (CVSS), the flaw was marked 9.8, which rates it as “critical”. CVE-2023-27992 […]

The post Patch Alert! Critical Command Injection Flaw Discovered in NAS Devices appeared first on Heimdal Security Blog.

alert authentication command command injection common vulnerability scoring system critical cve cvss cybersecurity news devices flaw injection issue nas network patch patches storage system vulnerability zyxel