CVE:CVE-2023-28771
CNNVD:CNNVD-202304-1976
Zyxel ZyWALL USG是中国合勤（Zyxel）公司的一款网络安全防火墙设备。
Zyxel ZyWALL USG 4.60版本至5.35版本存在操作系统命令注入漏洞，该漏洞源于错误消息处理不当。攻击者利用该漏洞通过向受影响的设备发送特制数据包来远程执行某些操作系统命令。
solution:Upgrade zyxel atp100_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel atp100w_firmware to a higher version than 5.35,and avoid the version [4.60,5.35); Upgrade zyxel atp200_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel atp500_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel atp700_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel atp800_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel usg_flex_100_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel usg_flex_200_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel usg_flex_50_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel usg_flex_500_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel usg_flex_50w_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel usg_flex_700_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel vpn100_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel vpn1000_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel vpn300_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel vpn50_firmware to a higher version than 5.36,and avoid the version [4.60,5.36); Upgrade zyxel zywall_usg_310_firmware to a higher version than 4.73,4.73,and avoid the version [4.60,4.73),4.73; Upgrade zyxel zywall_usg_100_firmware to a higher version than 4.73,4.73,and avoid the version [4.60,4.73),4.73