Known vulnerabilities in NAS540

Vendor: ZyXEL Communications Corp.
Software: NAS540
Software CPE: cpe:2.3:h:zyxel_communications_corp:nas540:*:*:*:*:*:*:*:*
Website: https://www.zyxel.com/
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NAS540 NAS540 is affected by 6 known vulnerabilities: 3 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77532 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-27992		 CWE-78 High
No
Exploited
 5.21(AATB.11)C0 20.06.2023 SB2023062001
#VU76619 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-27988		 CWE-78 Low
No
No
 5.21(AATB.10)C0 30.05.2023 SB2023053017
#VU67062 - Use of Externally-Controlled Format String
CVE-2022-34747		 CWE-134 High
No
No
 5.21(AATB.9)C0 07.09.2022 SB2022090724
#VU34062 - Improper Access Control
CVE-2020-13365		 CWE-284 Medium
No
No
 V5.21(AATB.6)C0 05.08.2020 SB2020080510
#VU34061 - Improper Access Control
CVE-2020-13364		 CWE-284 Medium
No
No
 V5.21(AATB.6)C0 05.08.2020 SB2020080510
#VU25597 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-9054		 CWE-78 High
Available
Exploited
 - 25.02.2020 SB2020022520