Nas540 Firmware vulnerabilities

3 known vulnerabilities in Nas540 Firmware from Zyxel. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Zyxel Multiple NAS Devices Command Injection Exploited

  CVE-2023-27992Jun 19, 2023ZyxelEPSS 82.3%

  The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated at

• 7.2 High severity

  NAS326 firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-27988May 30, 2023ZyxelEPSS 1.36%

  The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device rem

• 9.8 Critical severity

  Zyxel Multiple NAS Devices OS Command Injection Exploited

  CVE-2020-9054Mar 4, 2020ZyxelEPSS 100%

  Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS dev