Zyxel Nas540 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Zyxel Nas540 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-9054 — CVSS 9.8 (critical) — actively exploited: Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection…
• CVE-2023-27992 — CVSS 9.8 (critical) — actively exploited: The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware…
• CVE-2020-13364 — CVSS 8.8 (high): A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0…
• CVE-2020-13365 — CVSS 8.8 (high): Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account…
• CVE-2023-27988 — CVSS 7.2 (high): The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an…