27
Zyxel NAS customers should rush to replace their gadgets on the earliest because the distributors have patched quite a few safety flaws. Exploiting these vulnerabilities may permit extreme threats from unauthorized customers.
Zyxel NAS Units Exhibited Quite a few Safety Flaws
In response to a current advisory, Zyxel disclosed patching a number of safety flaws affecting its NAS gadgets. Particularly, the seller addressed six completely different vulnerabilities, together with three critical-severity points that would threat the gadgets’ safety. These embody,
- CVE-2023-35137: An improper authentication vulnerability within the authentication module allowed an unauthenticated adversary to entry system info. Exploiting the flaw required the attacker to ship a maliciously crafted URL to the goal gadget.
- CVE-2023-35138: A command injection vulnerability within the
show_zysync_server_contents perform. An unauthenticated adversary may execute working system (OS) instructions on the goal gadget by sending a maliciously crafted HTTP POST request. - CVE-2023-37927: This vulnerability may permit OS command execution to an authenticated attacker. The flaw existed on account of improper neutralization of particular parts within the CGI program in NAS gadgets.
- CVE-2023-37928: A command injection vulnerability within the WSGI server permitting OS command execution assaults from an authenticated adversary.
- CVE-2023-4473: A command injection vulnerability within the Zyxel NAS net server permitting OS command execution from an unauthenticated attacker.
- CVE-2023-4474: The improper neutralization of particular parts within the Zyxel NAS WSGI server may permit OS command execution from an unauthenticated attacker.
Zyxel acknowledged the researchers Maxim Suslov, Gábor Selján from BugProve, and Drew Balfour from IBM X-Pressure for individually discovering and reporting these vulnerabilities.
Concerning the susceptible gadgets, these vulnerabilities affected the Zyxel NAS326 V5.21(AAZF.14)C0 and earlier, and NAS542 V5.21(ABAG.11)C0 and earlier. Following the bug stories, the seller patched the vulnerabilities with Zyxel NAS326 V5.21(AAZF.15)C0 and NAS542 V5.21(ABAG.12)C0. Therefore, to keep away from potential dangers, customers should replace their susceptible NAS gadgets to the most recent firmware releases to obtain the patches.
Tell us your ideas within the feedback.
Oneplus Nord CE 3 5G (Grey Shimmer, 8GB RAM, 128GB Storage)
₹24,999.00 (as of December 12, 2023 17:32 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
iQOO Z7 Pro 5G (Blue Lagoon, 8GB RAM, 128GB Storage) | 3D Curved AMOLED Display | 4nm MediaTek Dimesity 7200 5G Processor | 64MP Aura Light OIS Camera | Segment's Slimmest & Lightest Smartphone
₹23,999.00 (as of December 12, 2023 17:32 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
Samsung Galaxy M34 5G (Prism Silver,6GB,128GB)|120Hz sAMOLED Display|50MP Triple No Shake Cam|6000 mAh Battery|4 Gen OS Upgrade & 5 Year Security Update|12GB RAM with RAM+|Android 13|Without Charger
₹16,499.00 (as of December 12, 2023 17:32 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
OnePlus Nord CE 3 5G (Aqua Surge, 12GB RAM, 256GB Storage)
₹27,999.00 (as of December 12, 2023 17:32 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
realme narzo N53 (Feather Gold, 4GB+64GB) 33W Segment Fastest Charging | Slimmest Phone in Segment | 90 Hz Smooth Display
₹8,999.00 (as of December 12, 2023 17:32 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
Portronics My Buddy K Portable Laptop Stand with Adjustable Height, Foldable, OverHeating Protection for Laptops & MacBooks (Grey)
₹499.00 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
STRIFF Mpad Mouse Mat 230X190X3mm Gaming Mouse Pad, Non-Slip Rubber Base, Waterproof Surface, Premium-Textured, Compatible with Laser and Optical Mice(Universe Black)
₹99.00 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
Canon PIXMA PG47 Black Ink Cartridge
₹669.00 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
Wayona Nylon Braided USB to Lightning Fast Charging and Data Sync Cable Compatible for iPhone 13, 12,11, X, 8, 7, 6, 5, iPad Air, Pro, Mini (3 FT Pack of 1, Grey)
₹389.00 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
Storio Kids Toys LCD Writing Tablet 8.5Inch E-Note Pad Best Birthday Gift for Girls Boys, Multicolor
₹139.00 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
WD 5TB Elements Portable HDD, External Hard Drive, USB 3.0 for PC & Mac, Plug and Play Ready - WDBU6Y0050BBK-WESN
$119.99 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
Toshiba Canvio Basics 1TB Portable External Hard Drive USB 3.0, Black - HDTB510XK3AA
$48.26 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
Graphics Card GPU Brace Support, Video Card Sag Holder Bracket, GPU Stand, L
$9.99 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
$109.99 (as of December 12, 2023 17:38 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)