CVE-2023-22918

🗓️ 24 Apr 2023 00:00:00Reported by ZyxelType

CVE-2023-22918 Zyxel ATP, USG FLEX, and VPN Series Firmware Vulnerabilit

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the CGI microprogramming interface of Zyxel ATP, USG FLEX, and VPN devices allows a intruder to gain unauthorized access to protected information.	8 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-22918	24 Apr 202322:19	–	circl
CNNVD	Zyxel ATP 安全漏洞	24 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-22918	24 Apr 202300:00	–	cvelist
EUVD	EUVD-2023-27020	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel Firewalls and Access Points	25 Apr 202300:00	–	ncsc
NVD	CVE-2023-22918	24 Apr 202318:15	–	nvd
OSV	CVE-2023-22918	24 Apr 202318:15	–	osv
Prion	Information disclosure	24 Apr 202318:15	–	prion
Positive Technologies	PT-2023-06: Unauth Information Exposure leads to Priviledge Escalation in Zyxel products	25 Apr 202300:00	–	ptsecurity

NVD

Node

zyxel atp200_firmwareRange4.32–5.36

AND

zyxel atp200Match-

Node

zyxel atp100_firmwareRange4.32–5.36

AND

zyxel atp100Match-

Node

zyxel atp700_firmwareRange4.32–5.36

AND

zyxel atp700Match-

Node

zyxel atp500_firmwareRange4.32–5.36

AND

zyxel atp500Match-

Node

zyxel atp100w_firmwareRange4.32–5.36

AND

zyxel atp100wMatch-

Node

zyxel atp800_firmwareRange4.32–5.36

AND

zyxel atp800Match-

Node

zyxel usg_flex_100_firmwareRange4.50–5.36

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_50_firmwareRange4.50–5.36

AND

zyxel usg_flex_50Match-

Node

zyxel usg_flex_200_firmwareRange4.50–5.36

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_500_firmwareRange4.50–5.36

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_700_firmwareRange4.50–5.36

AND

zyxel usg_flex_700Match-

Node

zyxel usg_flex_100w_firmwareRange4.50–5.36

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_20w-vpn_firmwareRange4.16–5.36

AND

zyxel usg_20w-vpnMatch-

Node

zyxel usg_flex_50w_firmwareRange4.16–5.36

AND

zyxel usg_flex_50wMatch-

Node

zyxel usg20-vpn_firmwareRange4.30–5.36

AND

zyxel usg20-vpnMatch-

Node

zyxel vpn100_firmwareRange4.30–5.36

AND

zyxel vpn100Match-

Node

zyxel vpn1000_firmwareRange4.30–5.36

AND

zyxel vpn1000Match-

Node

zyxel vpn300_firmwareRange4.30–5.36

AND

zyxel vpn300Match-

Node

zyxel vpn50_firmwareRange4.30–5.36

AND

zyxel vpn50Match-

Node

zyxel nap203_firmwareRange≤6.28(abfa.0)

AND

zyxel nap203Match-

Node

zyxel nap303_firmwareRange≤6.28(abex.0)

AND

zyxel nap303Match-

Node

zyxel nap353_firmwareRange≤6.28(abey.0)

AND

zyxel nap353Match-

Node

zyxel nwa110ax_firmwareRange≤6.50(abtg.2)

AND

zyxel nwa110axMatch-

Node

zyxel nwa1123-ac_hd_firmwareRange≤6.25(abin.9)

AND

zyxel nwa1123-ac_hdMatch-

Node

zyxel nwa1123-ac-pro_firmwareRange≤6.28(abhd.0)

AND

zyxel nwa1123-ac-proMatch-

Node

zyxel nwa1123acv3_firmwareRange≤6.50(abvt.0)

AND

zyxel nwa1123acv3Match-

Node

zyxel nwa210ax_firmwareRange≤6.50(abtd.2)

AND

zyxel nwa210axMatch-

Node

zyxel nwa220ax-6e_firmwareRange≤6.50(acco.2)

AND

zyxel nwa220ax-6eMatch-

Node

zyxel nwa50ax_firmwareRange≤6.55(acge.1)

AND

zyxel nwa50axMatch-

Node

zyxel nwa50ax-pro_firmwareRange≤6.50(acge.0)

AND

zyxel nwa50ax-proMatch-

Node

zyxel nwa5123-ac_hd_firmwareRange≤6.25(abim.9)

AND

zyxel nwa5123-ac_hdMatch-

Node

zyxel nwa55axe_firmwareRange≤6.29(abzl.1)

AND

zyxel nwa55axeMatch-

Node

zyxel nwa90ax_firmwareRange≤6.29(accv.1)

AND

zyxel nwa90axMatch-

Node

zyxel nwa90ax-pro_firmwareRange≤6.50(acgf.0)

AND

zyxel nwa90ax-proMatch-

Node

zyxel wac500_firmwareRange≤6.50(abvs.0)

AND

zyxel wac500Match-

Node

zyxel wac500h_firmwareRange≤6.50(abwa.0)

AND

zyxel wac500hMatch-

Node

zyxel wac5302d-sv2_firmwareRange≤6.25(abvz.9)

AND

zyxel wac5302d-sv2Match-

Node

zyxel wac6103d-i_firmwareRange≤6.28(aaxh.0)

AND

zyxel wac6103d-iMatch-

Node

zyxel wac6303d-s_firmwareRange≤6.25(abgl.9)

AND

zyxel wac6303d-sMatch-

Node

zyxel wac6502d-e_firmwareRange≤6.28(aasd.0)

AND

zyxel wac6502d-eMatch-

Node

zyxel wac6502d-s_firmwareRange≤6.28(aase.0)

AND

zyxel wac6502d-sMatch-

Node

zyxel wac6503d-s_firmwareRange≤6.28(aasf.0)

AND

zyxel wac6503d-sMatch-

Node

zyxel wac6552d-s_firmwareRange≤6.28(abio.0)

AND

zyxel wac6552d-sMatch-

Node

zyxel wac6553d-e_firmwareRange≤6.28(aasg.0)

AND

zyxel wac6553d-eMatch-

Node

zyxel wax510d_firmwareRange≤6.50(abtf.2)

AND

zyxel wax510dMatch-

Node

zyxel wax610d_firmwareRange≤6.50(abte.2)

AND

zyxel wax610dMatch-

Node

zyxel wax620d-6e_firmwareRange≤6.50(accn.2)

AND

zyxel wax620d-6eMatch-

Node

zyxel wax630s_firmwareRange≤6.50(abzd.2)

AND

zyxel wax630sMatch-

Node

zyxel wax640s-6e_firmwareRange≤6.50(accm.2)

AND

zyxel wax640s-6eMatch-

Node

zyxel wax650s_firmwareRange≤6.50(abrm.2)

AND

zyxel wax650sMatch-

Node

zyxel wax655e_firmwareRange≤6.50(acdo.2)

AND

zyxel wax655eMatch-

[
  {
    "vendor": "Zyxel",
    "product": "ATP series firmware",
    "versions": [
      {
        "version": "4.32 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "USG FLEX series firmware",
    "versions": [
      {
        "version": "4.50 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "USG FLEX 50(W) firmware",
    "versions": [
      {
        "version": "4.16 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "USG20(W)-VPN firmware",
    "versions": [
      {
        "version": "4.16 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "VPN series firmware",
    "versions": [
      {
        "version": "4.30 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "NWA110AX firmware",
    "versions": [
      {
        "version": "<= 6.50(ABTG.2)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "WAC500 firmware",
    "versions": [
      {
        "version": "<= 6.50(ABVS.0)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "WAX510D firmware",
    "versions": [
      {
        "version": "<= 6.50(ABTF.2)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps

17 Jun 2026 05:36Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

EPSS0.00771

CWE-359