Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2023-28771

Your trail

Where next?

Selected cve

CVE-2023-28771

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.

44 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority92.1–94.3

Coverage97.6%

Connections42

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 42

has cited scope1 retained · stored CVE-2023-28771 → Zyxel · VPN series firmware

bc6f5c9c-03c2-440a-a3d0-51fed09ef0ee

has cited scope1 retained · stored CVE-2023-28771 → Zyxel · USG FLEX series firmware

fbbe8218-5b04-4f54-823d-ec714cca32b5

has cited scope1 retained · stored CVE-2023-28771 → Zyxel · ATP series firmware

8cdececd-a9c4-4745-b83a-e3d140e0cfc7

has cited scope1 retained · stored CVE-2023-28771 → Zyxel · ZyWALL/USG series firmware

d13d2654-4328-4457-9b2a-b988e6f59020

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · zywall_usg_310

34bbed8c-98f1-41cb-ab8d-237cc7f7086e

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · vpn100

0acc13c3-2197-4b3a-bab5-0a28ac8cebcc

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · atp100

31722e61-077a-4010-bfe3-504ac628329d

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · usg_flex_200

61f7589d-601e-4c0a-9d61-36944d909123

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · zywall_usg_100

a50c2aa3-873c-42bb-a1dc-3fccb1531342

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · atp200

4703af3a-b72f-4ec0-bb71-5e39e658063c

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · atp500

459f7a1c-61fe-42d9-8dc0-a3f0180e44b7

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · atp800

c6beacc8-f9c4-4e7b-afdc-30531514bddd

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · vpn300

71061ce7-5a8d-4d8d-9251-f750383711c3

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · usg_flex_100

96142370-9876-47fd-af40-7ab2e8ff09fc

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · usg_flex_50

af9495bb-0bc6-46b9-a0a7-4ca03d8beba0

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · usg_flex_500

305cd863-3be3-4c2f-acde-b75ecaca22d8

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · vpn1000

f192eac0-3fc6-48a1-a2e9-f4cb982ffe13

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · usg_flex_50w

5cfb9696-2775-4e3f-acfc-c8f813a1a3b0

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · atp700

2a2357f7-101f-448f-86cc-598d30841b46

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · vpn50

62381e01-f722-4912-88e1-b3991edc952d

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · usg_flex_100w

93fe2c29-3ba9-4091-8065-fa67e938bfe3

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · atp100w

d6f40902-6b3f-4a53-91a4-4a4eccb8c963

has environmental constraint1 retained · stored CVE-2023-28771 → zyxel · usg_flex_700

c417acb7-9870-4c9b-a398-4aacd3d59611

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · usg_flex_200_firmware

3427c52e-1be9-4fc4-8fcb-fabd8626fe98

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · usg_flex_500_firmware

5d085d9f-feb0-43ca-af46-88c88eac9305

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · vpn1000_firmware

9fd6d40f-7650-4cb0-8596-8cdc1d20d90a

has vulnerable target scope2 retained · stored CVE-2023-28771 → zyxel · zywall_usg_100_firmware

09562def-83f6-4531-a040-35985ed07793423a0f93-65e5-464b-b1b6-f10ca96a8e60

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · atp500_firmware

07b45018-5eb6-4441-b5b2-46382fc88147

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · usg_flex_100w_firmware

33795c47-a025-4908-8262-e97578fe1cde

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · vpn100_firmware

633293d5-bb88-4a2c-b48f-eb01fa3ed4be

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · atp100w_firmware

7afb8416-13dd-464b-a7d8-5c644675c8d3

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · vpn300_firmware

645b66a0-1676-4ea9-842c-f122c095a8f6

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · usg_flex_50_firmware

2f1079c4-f399-43ef-89c8-cbe0b4de66f0

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · usg_flex_50w_firmware

f4c6702f-b859-487a-8e84-a71e99fdad06

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · atp100_firmware

a74abc05-a30c-4d6d-84bd-0901caa1668e

has vulnerable target scope2 retained · stored CVE-2023-28771 → zyxel · zywall_usg_310_firmware

04705889-6702-4aab-b25c-fee8f61435c841933d56-ce2c-45ab-97f3-d6633122bbf8

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · atp800_firmware

9ac7ef6d-395e-4547-9e0f-ecb6304d1809

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · atp200_firmware

85e87521-0db4-4326-93af-3ee1e34df44f

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · vpn50_firmware

9cd77d57-477d-4916-9587-cd6c3f6fd2bc

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · usg_flex_700_firmware

db3b4e52-d7ea-4f7a-8594-5373df0101ad

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · usg_flex_100_firmware

fe0fe925-8547-40d9-aeca-2597257fc90a

has vulnerable target scope1 retained · stored CVE-2023-28771 → zyxel · atp700_firmware

82451e7a-3ac7-4982-b948-074622520d77

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 43 entities · 42 relationships · bounded complete