Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

Zyxel has released patches to address 15 security issues impacting network-attached storage (NAS), firewall, and access point (AP) devices, including three critical flaws that could lead to authentication bypass and command injection.
The three vulnerabilities are listed below -

CVE-2023-35138 (CVSS score: 9.8) - A command injection vulnerability that could allow an

access access point address authentication authentication bypass bypass command command injection critical cve cvss cvss score devices firewall fix flaws injection nas network network-attached storage patches point releases score security security issues storage vulnerabilities zyxel