AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-22913

HIGH · CVSS 8.1 EPSS 1.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-04-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2023-22913
Severity
HIGH
CVSS
8.1
EPSS
1.29%

Original NVD Description

A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker to modify device configuration data, resulting in denial-of-service (DoS) conditions on an affected device.