9.8

CVE-2023-33009

Warning

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.

Data is provided by the National Vulnerability Database (NVD)
Zyxel ≫ Atp100 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Atp100 Version-
Zyxel ≫ Atp100 Firmware Version5.36 Update-
   Zyxel ≫ Atp100 Version-
Zyxel ≫ Atp100 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Atp100 Version-
Zyxel ≫ Atp200 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Atp200 Version-
Zyxel ≫ Atp200 Firmware Version5.36 Update-
   Zyxel ≫ Atp200 Version-
Zyxel ≫ Atp200 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Atp200 Version-
Zyxel ≫ Atp500 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Atp500 Version-
Zyxel ≫ Atp500 Firmware Version5.36 Update-
   Zyxel ≫ Atp500 Version-
Zyxel ≫ Atp500 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Atp500 Version-
Zyxel ≫ Atp100w Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Atp100w Version-
Zyxel ≫ Atp100w Firmware Version5.36 Update-
   Zyxel ≫ Atp100w Version-
Zyxel ≫ Atp100w Firmware Version5.36 Updatepatch1
   Zyxel ≫ Atp100w Version-
Zyxel ≫ Atp700 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Atp700 Version-
Zyxel ≫ Atp700 Firmware Version5.36 Update-
   Zyxel ≫ Atp700 Version-
Zyxel ≫ Atp700 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Atp700 Version-
Zyxel ≫ Atp800 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Atp800 Version-
Zyxel ≫ Atp800 Firmware Version5.36 Update-
   Zyxel ≫ Atp800 Version-
Zyxel ≫ Atp800 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Atp800 Version-
Zyxel ≫ Usg Flex 100 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg Flex 100 Version-
Zyxel ≫ Usg Flex 100 Firmware Version5.36 Update-
   Zyxel ≫ Usg Flex 100 Version-
Zyxel ≫ Usg Flex 100 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg Flex 100 Version-
Zyxel ≫ Usg Flex 50 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg Flex 50 Version-
Zyxel ≫ Usg Flex 50 Firmware Version5.36 Update-
   Zyxel ≫ Usg Flex 50 Version-
Zyxel ≫ Usg Flex 50 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg Flex 50 Version-
Zyxel ≫ Usg Flex 200 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg Flex 200 Version-
Zyxel ≫ Usg Flex 200 Firmware Version5.36 Update-
   Zyxel ≫ Usg Flex 200 Version-
Zyxel ≫ Usg Flex 200 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg Flex 200 Version-
Zyxel ≫ Usg Flex 500 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg Flex 500 Version-
Zyxel ≫ Usg Flex 500 Firmware Version5.36 Update-
   Zyxel ≫ Usg Flex 500 Version-
Zyxel ≫ Usg Flex 500 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg Flex 500 Version-
Zyxel ≫ Usg Flex 700 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg Flex 700 Version-
Zyxel ≫ Usg Flex 700 Firmware Version5.36 Update-
   Zyxel ≫ Usg Flex 700 Version-
Zyxel ≫ Usg Flex 700 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg Flex 700 Version-
Zyxel ≫ Usg Flex 100 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg Flex 100w Version-
Zyxel ≫ Usg Flex 100w Firmware Version5.36 Update-
   Zyxel ≫ Usg Flex 100w Version-
Zyxel ≫ Usg Flex 100w Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg Flex 100w Version-
Zyxel ≫ Usg Flex 50w Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg Flex 50w Version-
Zyxel ≫ Usg Flex 50w Firmware Version5.36 Update-
   Zyxel ≫ Usg Flex 50w Version-
Zyxel ≫ Usg Flex 50w Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg Flex 50w Version-
Zyxel ≫ Usg 20w-vpn Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg 20w-vpn Version-
Zyxel ≫ Usg 20w-vpn Firmware Version5.36 Update-
   Zyxel ≫ Usg 20w-vpn Version-
Zyxel ≫ Usg 20w-vpn Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg 20w-vpn Version-
Zyxel ≫ Vpn100 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Vpn100 Version-
Zyxel ≫ Vpn100 Firmware Version5.36 Update-
   Zyxel ≫ Vpn100 Version-
Zyxel ≫ Vpn100 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Vpn100 Version-
Zyxel ≫ Vpn50 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Vpn50 Version-
Zyxel ≫ Vpn50 Firmware Version5.36 Update-
   Zyxel ≫ Vpn50 Version-
Zyxel ≫ Vpn50 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Vpn50 Version-
Zyxel ≫ Vpn300 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Vpn300 Version-
Zyxel ≫ Vpn300 Firmware Version5.36 Update-
   Zyxel ≫ Vpn300 Version-
Zyxel ≫ Vpn300 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Vpn300 Version-
Zyxel ≫ Vpn1000 Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Vpn1000 Version-
Zyxel ≫ Vpn1000 Firmware Version5.36 Update-
   Zyxel ≫ Vpn1000 Version-
Zyxel ≫ Vpn1000 Firmware Version5.36 Updatepatch1
   Zyxel ≫ Vpn1000 Version-
Zyxel ≫ Usg20-vpn Firmware Version >= 4.60 < 5.36
   Zyxel ≫ Usg20-vpn Version-
Zyxel ≫ Usg20-vpn Firmware Version5.36 Update-
   Zyxel ≫ Usg20-vpn Version-
Zyxel ≫ Usg20-vpn Firmware Version5.36 Updatepatch1
   Zyxel ≫ Usg20-vpn Version-
Zyxel ≫ Usg 40 Firmware Version >= 4.60 < 4.73
   Zyxel ≫ Usg 40 Version-
Zyxel ≫ Usg 40 Firmware Version4.73 Update-
   Zyxel ≫ Usg 40 Version-
Zyxel ≫ Usg 40 Firmware Version4.73 Updatepatch1
   Zyxel ≫ Usg 40 Version-
Zyxel ≫ Usg 40w Firmware Version >= 4.60 < 4.73
   Zyxel ≫ Usg 40w Version-
Zyxel ≫ Usg 40w Firmware Version4.73 Update-
   Zyxel ≫ Usg 40w Version-
Zyxel ≫ Usg 40w Firmware Version4.73 Updatepatch1
   Zyxel ≫ Usg 40w Version-
Zyxel ≫ Usg 60w Firmware Version >= 4.60 < 4.73
   Zyxel ≫ Usg 60w Version-
Zyxel ≫ Usg 60w Firmware Version4.73 Update-
   Zyxel ≫ Usg 60w Version-
Zyxel ≫ Usg 60w Firmware Version4.73 Updatepatch1
   Zyxel ≫ Usg 60w Version-
Zyxel ≫ Usg 60 Firmware Version >= 4.60 < 4.73
   Zyxel ≫ Usg 60 Version-
Zyxel ≫ Usg 60 Firmware Version4.73 Update-
   Zyxel ≫ Usg 60 Version-
Zyxel ≫ Usg 60 Firmware Version4.73 Updatepatch1
   Zyxel ≫ Usg 60 Version-

05.06.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Vulnerability

Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.64% 0.887
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
security@zyxel.com.tw 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.