target entity

Multiple Network-Attached Storage (NAS) Devices

2 source-linked records in the current knowledge graph.

Jun 23, 2023high

CVE-2023-27992: Zyxel Multiple NAS Devices Command Injection Vulnerability

Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request. Required action: Apply updates per vendor instructions.

CVE-2023-27992EPSS 84.2%Multiple Network-Attached Storage (NAS) DevicesZyxel

CISA KEV ↗ · unattributed attribution

Mar 25, 2022high

CVE-2020-9054: Zyxel Multiple NAS Devices OS Command Injection Vulnerability

Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code. Required action: Apply updates per vendor instructions.

CVE-2020-9054EPSS 100.0%Multiple Network-Attached Storage (NAS) DevicesZyxel

CISA KEV ↗ · unattributed attribution