CISA known exploited vulnerability

CVE-2020-9054

Zyxel Multiple NAS Devices OS Command Injection Vulnerability

SOURCE FACT

Zyxel · Multiple Network-Attached Storage (NAS) Devices

Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2020-9054

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2020-9054

Zyxel · Multiple Network-Attached Storage (NAS) Devices

Required action

CISA notes

Could this product be present?