Zyxel Multiple Network-Attached Storage (NAS) Devices: Command Injection (CVE-2023-27992) ยท updates https://pwn.watch/i/zyxel-multiple-network-attached-storage-nas-cve-2023-27992 Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request. Added to CISA KEV on 2023-06-23. en Fri, 23 Jun 2023 00:00:00 GMT Zyxel Multiple Network-Attached Storage (NAS) Devices: Command Injection (CVE-2023-27992): CISA added CVE-2023-27992 to the KEV catalog (due 2023-07-14). https://pwn.watch/i/zyxel-multiple-network-attached-storage-nas-cve-2023-27992 https://pwn.watch/i/zyxel-multiple-network-attached-storage-nas-cve-2023-27992#2023-06-23-5f8792dc Fri, 23 Jun 2023 00:00:00 GMT critical <p>Zyxel Multiple Network-Attached Storage (NAS) Devices: Command Injection (CVE-2023-27992): CISA added CVE-2023-27992 to the KEV catalog (due 2023-07-14).</p>