{"api_version":"v1","generated_at":"2026-10-09T10:00:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-zyxel-multiple-network-attached-storage-nas-devices-ea62abca60f1","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Multiple Network-Attached Storage (NAS) Devices","next_cursor":null,"observations":[{"affected":"NAS326 firmware: < V5.21(AAZF.14)C0; NAS540 firmware: < V5.21(AATB.11)C0; NAS542 firmware: < V5.21(ABAG.11)C0","affected_versions_present":true,"cve_id":"CVE-2023-27992","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-27992","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-21T23:05:45.675Z","patch_url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-authentication-command-injection-vulnerability-in-nas-products","primary_source":"","published":"2023-06-19T11:42:41.774Z"},{"affected":"NAS326: V5.21(AAZF.7)C0 \u2264 V5.21(AAZF.7)C0; NAS520: V5.21(AASZ.3)C0 \u2264 V5.21(AASZ.3)C0; NAS540: V5.21(AATB.4)C0 \u2264 V5.21(AATB.4)C0; NAS542: V5.21(ABAG.4)C0 \u2264 V5.21(ABAG.4)C0; NSA210: all; NSA220: all; NSA220+: all; NSA221: all; NSA310: V4.75(AALH.2)C0 \u2264 V4.75(AALH.2)C0; NSA320: all; NSA320S: V4.75(AANV.2)C0 \u2264 V4.75(AANV.2)C0; NSA325: V4.81(AAAJ.1)C0 \u2264 V4.81(AAAJ.1)C0; NSA325v2: V4.81(AALS.1)C0 \u2264 V4.81(AALS.1)C0","affected_versions_present":true,"cve_id":"CVE-2020-9054","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-9054","fixed":"ZyXEL has made firmware updates available for NAS326, NAS520, NAS540, NAS542, ATP100, ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200, VPN50, VPN100, VPN300, VPN1000, ZyWALL110, ZyWALL310, and ZyWALL1100 devices.","last_modified":"2026-10-07T17:32:05.389Z","patch_url":"https://cwe.mitre.org/data/definitions/78.html","primary_source":"","published":"2020-03-04T19:30:18.400Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Zyxel"}}