As cited
Copy frozen at (site build).
vulnerabilities
GreyNoise Observes Exploit Attempts Targeting Zyxel CVE-2023-28771
GreyNoise detected exploit attempts targeting CVE-2023-28771, a remote code execution vulnerability in Zyxel IKE (Internet Key Exchange) packet decoders accessible over UDP port 500. The vulnerability allows unauthenticated attackers to execute arbitrary code on affected Zyxel devices. Active exploitation of this flaw is now occurring in the wild.
Why it matters: Organizations running vulnerable Zyxel VPN and network appliances need to patch immediately, as the vulnerability is under active attack and affects devices typically exposed to the internet.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
GreyNoise Observes Exploit Attempts Targeting Zyxel CVE-2023-28771
GreyNoise detected exploit attempts targeting CVE-2023-28771, a remote code execution vulnerability in Zyxel Internet Key Exchange packet decoders accessible over UDP port 500. The vulnerability allows attackers to execute code on affected systems through network-based attacks.
Why it matters: Organizations running Zyxel IKE implementations should verify patches are applied, as active exploitation attempts are now being observed in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
GreyNoise Observes Exploit Attempts Targeting Zyxel CVE-2023-28771
GreyNoise detected exploit attempts targeting CVE-2023-28771, a remote code execution vulnerability in Zyxel Internet Key Exchange packet decoders accessible over UDP port 500. The vulnerability allows attackers to execute code on affected systems through network-based attacks.
Why it matters: Organizations running Zyxel IKE implementations should verify patches are applied, as active exploitation attempts are now being observed in the wild.
- Source published
- First seen by Cybersecurity Tracker