CVE-2023-33009

Warnung

EPSS 28.14%
Veröffentlicht 24.05.2023 13:15:09
Zuletzt bearbeitet 26.02.2026 15:03:56
Erkennungen
Login

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.

Betroffene Produkte Warnungen 1 Metriken 3 CWE 1 Referenzen 5

NVD 69 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zyxel ≫ Atp100 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Atp100 Version -

Zyxel ≫ Atp100 Firmware Version 5.36 Update -

Zyxel ≫ Atp100 Version -

Zyxel ≫ Atp100 Firmware Version 5.36 Update patch1

Zyxel ≫ Atp100 Version -

Zyxel ≫ Atp200 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Atp200 Version -

Zyxel ≫ Atp200 Firmware Version 5.36 Update -

Zyxel ≫ Atp200 Version -

Zyxel ≫ Atp200 Firmware Version 5.36 Update patch1

Zyxel ≫ Atp200 Version -

Zyxel ≫ Atp500 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Atp500 Version -

Zyxel ≫ Atp500 Firmware Version 5.36 Update -

Zyxel ≫ Atp500 Version -

Zyxel ≫ Atp500 Firmware Version 5.36 Update patch1

Zyxel ≫ Atp500 Version -

Zyxel ≫ Atp100w Firmware Version >= 4.60 < 5.36

Zyxel ≫ Atp100w Version -

Zyxel ≫ Atp100w Firmware Version 5.36 Update -

Zyxel ≫ Atp100w Version -

Zyxel ≫ Atp100w Firmware Version 5.36 Update patch1

Zyxel ≫ Atp100w Version -

Zyxel ≫ Atp700 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Atp700 Version -

Zyxel ≫ Atp700 Firmware Version 5.36 Update -

Zyxel ≫ Atp700 Version -

Zyxel ≫ Atp700 Firmware Version 5.36 Update patch1

Zyxel ≫ Atp700 Version -

Zyxel ≫ Atp800 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Atp800 Version -

Zyxel ≫ Atp800 Firmware Version 5.36 Update -

Zyxel ≫ Atp800 Version -

Zyxel ≫ Atp800 Firmware Version 5.36 Update patch1

Zyxel ≫ Atp800 Version -

Zyxel ≫ Usg Flex 100 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg Flex 100 Version -

Zyxel ≫ Usg Flex 100 Firmware Version 5.36 Update -

Zyxel ≫ Usg Flex 100 Version -

Zyxel ≫ Usg Flex 100 Firmware Version 5.36 Update patch1

Zyxel ≫ Usg Flex 100 Version -

Zyxel ≫ Usg Flex 50 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg Flex 50 Version -

Zyxel ≫ Usg Flex 50 Firmware Version 5.36 Update -

Zyxel ≫ Usg Flex 50 Version -

Zyxel ≫ Usg Flex 50 Firmware Version 5.36 Update patch1

Zyxel ≫ Usg Flex 50 Version -

Zyxel ≫ Usg Flex 200 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg Flex 200 Version -

Zyxel ≫ Usg Flex 200 Firmware Version 5.36 Update -

Zyxel ≫ Usg Flex 200 Version -

Zyxel ≫ Usg Flex 200 Firmware Version 5.36 Update patch1

Zyxel ≫ Usg Flex 200 Version -

Zyxel ≫ Usg Flex 500 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg Flex 500 Version -

Zyxel ≫ Usg Flex 500 Firmware Version 5.36 Update -

Zyxel ≫ Usg Flex 500 Version -

Zyxel ≫ Usg Flex 500 Firmware Version 5.36 Update patch1

Zyxel ≫ Usg Flex 500 Version -

Zyxel ≫ Usg Flex 700 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg Flex 700 Version -

Zyxel ≫ Usg Flex 700 Firmware Version 5.36 Update -

Zyxel ≫ Usg Flex 700 Version -

Zyxel ≫ Usg Flex 700 Firmware Version 5.36 Update patch1

Zyxel ≫ Usg Flex 700 Version -

Zyxel ≫ Usg Flex 100w Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg Flex 100w Version -

Zyxel ≫ Usg Flex 100w Firmware Version 5.36 Update -

Zyxel ≫ Usg Flex 100w Version -

Zyxel ≫ Usg Flex 100w Firmware Version 5.36 Update patch1

Zyxel ≫ Usg Flex 100w Version -

Zyxel ≫ Usg Flex 50w Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg Flex 50w Version -

Zyxel ≫ Usg Flex 50w Firmware Version 5.36 Update -

Zyxel ≫ Usg Flex 50w Version -

Zyxel ≫ Usg Flex 50w Firmware Version 5.36 Update patch1

Zyxel ≫ Usg Flex 50w Version -

Zyxel ≫ Usg 20w-vpn Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg 20w-vpn Version -

Zyxel ≫ Usg 20w-vpn Firmware Version 5.36 Update -

Zyxel ≫ Usg 20w-vpn Version -

Zyxel ≫ Usg 20w-vpn Firmware Version 5.36 Update patch1

Zyxel ≫ Usg 20w-vpn Version -

Zyxel ≫ Vpn100 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Vpn100 Version -

Zyxel ≫ Vpn100 Firmware Version 5.36 Update -

Zyxel ≫ Vpn100 Version -

Zyxel ≫ Vpn100 Firmware Version 5.36 Update patch1

Zyxel ≫ Vpn100 Version -

Zyxel ≫ Vpn50 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Vpn50 Version -

Zyxel ≫ Vpn50 Firmware Version 5.36 Update -

Zyxel ≫ Vpn50 Version -

Zyxel ≫ Vpn50 Firmware Version 5.36 Update patch1

Zyxel ≫ Vpn50 Version -

Zyxel ≫ Vpn300 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Vpn300 Version -

Zyxel ≫ Vpn300 Firmware Version 5.36 Update -

Zyxel ≫ Vpn300 Version -

Zyxel ≫ Vpn300 Firmware Version 5.36 Update patch1

Zyxel ≫ Vpn300 Version -

Zyxel ≫ Vpn1000 Firmware Version >= 4.60 < 5.36

Zyxel ≫ Vpn1000 Version -

Zyxel ≫ Vpn1000 Firmware Version 5.36 Update -

Zyxel ≫ Vpn1000 Version -

Zyxel ≫ Vpn1000 Firmware Version 5.36 Update patch1

Zyxel ≫ Vpn1000 Version -

Zyxel ≫ Usg20-vpn Firmware Version >= 4.60 < 5.36

Zyxel ≫ Usg20-vpn Version -

Zyxel ≫ Usg20-vpn Firmware Version 5.36 Update -

Zyxel ≫ Usg20-vpn Version -

Zyxel ≫ Usg20-vpn Firmware Version 5.36 Update patch1

Zyxel ≫ Usg20-vpn Version -

Zyxel ≫ Usg 40 Firmware Version >= 4.60 < 4.73

Zyxel ≫ Usg 40 Version -

Zyxel ≫ Usg 40 Firmware Version 4.73 Update -

Zyxel ≫ Usg 40 Version -

Zyxel ≫ Usg 40 Firmware Version 4.73 Update patch1

Zyxel ≫ Usg 40 Version -

Zyxel ≫ Usg 40w Firmware Version >= 4.60 < 4.73

Zyxel ≫ Usg 40w Version -

Zyxel ≫ Usg 40w Firmware Version 4.73 Update -

Zyxel ≫ Usg 40w Version -

Zyxel ≫ Usg 40w Firmware Version 4.73 Update patch1

Zyxel ≫ Usg 40w Version -

Zyxel ≫ Usg 60w Firmware Version >= 4.60 < 4.73

Zyxel ≫ Usg 60w Version -

Zyxel ≫ Usg 60w Firmware Version 4.73 Update -

Zyxel ≫ Usg 60w Version -

Zyxel ≫ Usg 60w Firmware Version 4.73 Update patch1

Zyxel ≫ Usg 60w Version -

Zyxel ≫ Usg 60 Firmware Version >= 4.60 < 4.73

Zyxel ≫ Usg 60 Version -

Zyxel ≫ Usg 60 Firmware Version 4.73 Update -

Zyxel ≫ Usg 60 Version -

Zyxel ≫ Usg 60 Firmware Version 4.73 Update patch1

Zyxel ≫ Usg 60 Version -

05.06.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Schwachstelle

Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	28.14%	0.979

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
security@zyxel.com.tw	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33009

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2023-33009

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-33009

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-33009

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-33009

05.06.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog