https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771 Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device. Added to CISA KEV on 2023-05-31. en Wed, 31 May 2023 00:00:00 GMT https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771 https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771#2023-05-31-804043eb Wed, 31 May 2023 00:00:00 GMT critical <p>Zyxel Multiple Firewalls: OS Command Injection (CVE-2023-28771): CISA added CVE-2023-28771 to the KEV catalog (due 2023-06-21).</p>