CVE-2023-35137 (published 2023-11-30T01:25:52.494Z)
An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to obtain system information by sending a crafted URL to a vulnerable device.
Affected products: Vendor: Zyxel
Product: NAS326 firmware
Versions: V5.21(AAZF.14)C0