???? ?????? ??????? ???? Zyxel ????????? ?? ???? ?? ??? ?????? ??? ?? ?????????? ??????? ??? ????? ???? ??? ?? ???????? ???? ????? ?? ?? ??? ??? ?? ????????? ????????? ???? ??????????? ???? ????.
??? ????? ?? ?? ????? CVE-2023-28771 ????? ??????[?]? ?? ????? ????????? CVSS ????? ?????? ??? ???. ?????? ?? TRAPA Security ?? ????? ??? ??? ?????? ?????????.
Zyxel ?? ?????? ?? ?? ????? ???? ???[?]: “?????? ?????? ???? ??? ?? ???? ?? ???????? ??????? ???????? ?? ?? ????? ????? ???? ????? ??? ?? ???? ?? ??????? ?????????? ?? ?? ??? ??? ?? ????? ???????? ??????????? ?? ?????? ????????? ???? ???.”
??????? ??? ????? ??? ??? ????????? ??:
- ATP (???????? ZLD V4.60 ?? ??? ???? ??? ?? ZLD V5.36)
- USG FLEX (???????? ZLD V4.60 ?? ??? ???? ??? ?? ZLD V5.36)
- VPN (???????? ZLD V4.60 ?? ??? ???? ??? ?? ZLD V5.36)
- ZyWALL/USG (???????? ZLD V4.60 ?? ??? ???? ??? ?? ZLD V4.73 Patch 1)
Zyxel ?????? ?????????? ????? ????? ?? ?? ????? ???? ?? ?? ?? ???????? ??????? ????? ????? ???????? ([?]CVE-2023-27991? ?????? ??? ?? ????? CVSS) ?? ???????? ?? ????? ????? ???? ??? ????? ??? ???? ?? ??????? ?????????? ?? ?? ??? ??? ???? ???? ????? ???? ???[?].
???? ?? ?? ?????????? ATP? USG FLEX? USG FLEX 50(W) / USG20(W)-VPN ? VPN ????? ????????? ?? ZLD V5.36 ????? ??? ???.
???????? ??? ???? ?????? ???? ??? ??? ?? ??? ???? ? ?? ????? ?? ??? ????? ?? ????? ??????? ? ?????????? ???? ?????? (AP) ?? ??? ????? ???? ?????? (?? CVE-2023-22913 ?? CVE-2023-22918) ???????? ????? ???[?] ?? ???????? ???? ?? ????? ?? ? ???? ????? ????? ????? ????? (DoS) ???.
Nikita Abramov ?? ???? ????? ?????? ???? Positive Technologies ????? ????? ??? ????? ???. Abramov? ????? ??? ????? ?????? ???? ?????????? ????? ????? ? ????? ???? ?? ?? CPE? ???? ONT ? ??????????????? WiFi ??? ???[?].
???????? ??? [?]CVE-2022-43389 (?????? ??? ?? ????? CVSS) ???? ?? ?????????? ????? ???? ?? ?????????? ?G NR/4G LTE CPE ?? ??? ????? ???? ??????.
Abramov ?? ?? ???? ????? ???[?]: «??? ?????????? ???? ??????????? ????? ?? ????? ???? ????? ? ???? ?? ????? ?? ?????? ?? ?????? ??. ???????? ?? ????? ???????? ?? ??? ??? ?? ?????? ?????? ???? ??? ? ?????? ?? ?? ?????? ????? ???.»
?????
[?] https://nvd.nist.gov/vuln/detail/CVE-2023-28771
[?] https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls
[?] https://nvd.nist.gov/vuln/detail/CVE-2023-27991
[?] https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-and-post-authentication-command-injection-vulnerability-in-firewalls
[?] https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps
[?] https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders
[?] https://nvd.nist.gov/vuln/detail/CVE-2022-43389
[?] https://www.ptsecurity.com/ww-en/about/news/positive-technologies-helps-fix-vulnerabilities-in-routers-and-other-zyxel-devices
[?] https://thehackernews.com/2023/04/zyxel-firewall-devices-vulnerable-to.html
