CVE-2023-33013

Summary

CVE-2023-33013 is a post-authentication command injection vulnerability affecting the Network Time Protocol (NTP) feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0. Successful exploitation of this issue allows authenticated attackers to execute operating system commands remotely by sending specially crafted HTTP requests. This vulnerability poses a significant risk to network security and should be addressed by applying the latest security patches. Users are advised to update their firmware as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.