{"cvss":9.8,"datePublished":"2023-05-25T00:00:00Z","dateUpdated":"2023-05-25T00:00:00Z","description":"Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device.","dueDate":"2023-06-21T00:00:00Z","id":"CVE-2023-28771","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Multiple Firewalls","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"vulncheck_kev","title":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","vendor":"Zyxel"}