6.5

CVE-2023-28768

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.

Data is provided by the National Vulnerability Database (NVD)
ZyxelXgs2220-30 Firmware Version4.80(abxn.1)
   ZyxelXgs2220-30 Version-
ZyxelXgs2220-30f Firmware Version4.80(abye.1)
   ZyxelXgs2220-30f Version-
ZyxelXgs2220-30hp Firmware Version4.80(abxo.1)
   ZyxelXgs2220-30hp Version-
ZyxelXgs2220-54 Firmware Version4.80(abxp.1)
   ZyxelXgs2220-54 Version-
ZyxelXgs2220-54fp Firmware Version4.80(acce.1)
   ZyxelXgs2220-54fp Version-
ZyxelXgs2220-54hp Firmware Version4.80(abxq.1)
   ZyxelXgs2220-54hp Version-
ZyxelXmg1930-30 Firmware Version4.80(acar.1)
   ZyxelXmg1930-30 Version-
ZyxelXmg1930-30hp Firmware Version4.80(acas.1)
   ZyxelXmg1930-30hp Version-
ZyxelXs1930-10 Firmware Version4.80(abqe.1)
   ZyxelXs1930-10 Version-
ZyxelXs1930-12f Firmware Version4.80(abzv.1)
   ZyxelXs1930-12f Version-
ZyxelXs1930-12hp Firmware Version4.80(abqf.1)
   ZyxelXs1930-12hp Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.306
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
security@zyxel.com.tw 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.