Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2023-4397

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN

Description

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allow an authenticated local attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zyxel ATP series firmware

Default version status: unaffected

  • 5.37affected

Zyxel USG FLEX series firmware

Default version status: unaffected

  • 5.37affected

Zyxel USG FLEX 50(W) series firmware

Default version status: unaffected

  • 5.37affected

Zyxel USG20(W)-VPN series firmware

Default version status: unaffected

  • 5.37affected

References