7.5

CVE-2023-22915

A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.30 through 5.35, USG20(W)-VPN firmware versions 4.30 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote unauthenticated attacker to cause DoS conditions by sending a crafted HTTP request if the Facebook WiFi function were enabled on an affected device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zyxel ≫ Usg Flex 100 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Usg Flex 100 Version -
Zyxel ≫ Usg Flex 100w Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Usg Flex 100w Version -
Zyxel ≫ Usg Flex 200 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Usg Flex 200 Version -
Zyxel ≫ Usg Flex 50 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Usg Flex 50 Version -
Zyxel ≫ Usg Flex 50w Firmware Version >= 4.30 <= 5.35
   Zyxel ≫ Usg Flex 50w Version -
Zyxel ≫ Usg Flex 500 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Usg Flex 500 Version -
Zyxel ≫ Usg Flex 700 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Usg Flex 700 Version -
Zyxel ≫ Vpn100 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Vpn100 Version -
Zyxel ≫ Vpn1000 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Vpn1000 Version -
Zyxel ≫ Vpn300 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Vpn300 Version -
Zyxel ≫ Vpn50 Firmware Version >= 4.50 <= 5.35
   Zyxel ≫ Vpn50 Version -
Zyxel ≫ Usg 20w-vpn Firmware Version >= 4.30 <= 5.35
   Zyxel ≫ Usg 20w-vpn Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.05% 0.599
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
security@zyxel.com.tw 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps
Vendor Advisory