CVE:CVE-2023-34138
CNNVD:CNNVD-202307-1461
Zyxel ATP是中国合勤（Zyxel）公司的一款防火墙。
Zyxel ATP ZLD V4.60 到 V5.36 Patch 2版本、USG FLEX ZLD V5.00 到 V5.36 Patch 2版本、USG FLEX 50(W) / USG20(W)-VPN ZLD V4.60 到 V5.36 Patch 2版本、VPN ZLD V5.00 到 V5.36 Patch 2版本存在安全漏洞，该漏洞源于热点管理功能中存在命令注入，允许未经身份验证的基于 LAN 的攻击者在受影响的设备上执行操作系统命令，欺骗授权管理员将其 IP 地址添加到受信任的 RADIUS 列表中。
solution:Upgrade zyxel usg_20w-vpn_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel usg_2200-vpn_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel usg_flex_100_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel usg_flex_100w_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel usg_flex_200_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel usg_flex_50_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel usg_flex_500_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel usg_flex_50w_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel usg_flex_700_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_atp100_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_atp100w_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_atp200_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_atp500_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_atp700_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_atp800_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_vpn100_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_vpn2s_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_vpn300_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_vpn50_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_vpn_100_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_vpn_300_firmware to a higher version than 5.37,and avoid the version [4.60,5.37); Upgrade zyxel zywall_vpn_50_firmware to a higher version than 5.37,and avoid the version [4.60,5.37)