CVE-2023-35137CWE-287

An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version…

High · published November 30, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to obtain system information by sending a crafted URL to a vulnerable device.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00866 · 58.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-11-30T01:25Z
EPSS history
Timeline
  • 30 NOV 01:25Z
    An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version…
    cvelistv5