High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-30	CVE-2023-27988	OS Command Injection vulnerability in Zyxel Nas326 Firmware, Nas540 Firmware and Nas542 Firmware The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device remotely. network low complexity zyxel CWE-78	7.2
2020-08-06	CVE-2020-13365	Improper Authentication vulnerability in Zyxel products Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. network low complexity zyxel CWE-287	8.8
2020-08-06	CVE-2020-13364	Unspecified vulnerability in Zyxel products A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. network low complexity zyxel	8.8