{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Zyxel Multiple Firewalls: OS Command Injection (CVE-2023-28771) · updates",
  "home_page_url": "https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771",
  "feed_url": "https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771/feed.json",
  "description": "Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device. Added to CISA KEV on 2023-05-31.",
  "language": "en",
  "_pwn": {
    "slug": "zyxel-multiple-firewalls-cve-2023-28771",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771/feed.xml",
    "llms": "https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771/llms.txt",
    "json": "https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771#2023-05-31-804043eb",
      "url": "https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771#2023-05-31-804043eb",
      "title": "Zyxel Multiple Firewalls: OS Command Injection (CVE-2023-28771): CISA added CVE-2023-28771 to the KEV catalog (due 2023-06-21).",
      "content_text": "Zyxel Multiple Firewalls: OS Command Injection (CVE-2023-28771): CISA added CVE-2023-28771 to the KEV catalog (due 2023-06-21).",
      "date_published": "2023-05-31T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    }
  ]
}