CVE-2023-22918

🗓️ 24 Apr 2023 00:00:00Reported by ZyxelType

CVE-2023-22918 Zyxel ATP, USG FLEX, and VPN Series Firmware Vulnerabilit

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the CGI microprogramming interface of Zyxel ATP, USG FLEX, and VPN devices allows a intruder to gain unauthorized access to protected information.	8 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-22918	24 Apr 202322:19	–	circl
CNNVD	Zyxel ATP 安全漏洞	24 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-22918	24 Apr 202300:00	–	cvelist
EUVD	EUVD-2023-27020	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel Firewalls and Access Points	25 Apr 202300:00	–	ncsc
NVD	CVE-2023-22918	24 Apr 202318:15	–	nvd
OSV	CVE-2023-22918	24 Apr 202318:15	–	osv
Prion	Information disclosure	24 Apr 202318:15	–	prion
Positive Technologies	PT-2023-06: Unauth Information Exposure leads to Priviledge Escalation in Zyxel products	25 Apr 202300:00	–	ptsecurity

NVD

Node

AND

zyxel atp200_firmwareRange4.32–5.36

zyxel atp200Match-

Node

AND

zyxel atp100_firmwareRange4.32–5.36

zyxel atp100Match-

Node

AND

zyxel atp700_firmwareRange4.32–5.36

zyxel atp700Match-

Node

AND

zyxel atp500_firmwareRange4.32–5.36

zyxel atp500Match-

Node

AND

zyxel atp100w_firmwareRange4.32–5.36

zyxel atp100wMatch-

Node

AND

zyxel atp800_firmwareRange4.32–5.36

zyxel atp800Match-

Node

AND

zyxel usg_flex_100_firmwareRange4.50–5.36

zyxel usg_flex_100Match-

Node

AND

zyxel usg_flex_50_firmwareRange4.50–5.36

zyxel usg_flex_50Match-

Node

AND

zyxel usg_flex_200_firmwareRange4.50–5.36

zyxel usg_flex_200Match-

Node

AND

zyxel usg_flex_500_firmwareRange4.50–5.36

zyxel usg_flex_500Match-

Node

AND

zyxel usg_flex_700_firmwareRange4.50–5.36

zyxel usg_flex_700Match-

Node

AND

zyxel usg_flex_100w_firmwareRange4.50–5.36

zyxel usg_flex_100wMatch-

Node

AND

zyxel usg_20w-vpn_firmwareRange4.16–5.36

zyxel usg_20w-vpnMatch-

Node

AND

zyxel usg_flex_50w_firmwareRange4.16–5.36

zyxel usg_flex_50wMatch-

Node

AND

zyxel usg20-vpn_firmwareRange4.30–5.36

zyxel usg20-vpnMatch-

Node

AND

zyxel vpn100_firmwareRange4.30–5.36

zyxel vpn100Match-

Node

AND

zyxel vpn1000_firmwareRange4.30–5.36

zyxel vpn1000Match-

Node

AND

zyxel vpn300_firmwareRange4.30–5.36

zyxel vpn300Match-

Node

AND

zyxel vpn50_firmwareRange4.30–5.36

zyxel vpn50Match-

Node

AND

zyxel nap203_firmwareRange≤6.28(abfa.0)

zyxel nap203Match-

Node

AND

zyxel nap303_firmwareRange≤6.28(abex.0)

zyxel nap303Match-

Node

AND

zyxel nap353_firmwareRange≤6.28(abey.0)

zyxel nap353Match-

Node

AND

zyxel nwa110ax_firmwareRange≤6.50(abtg.2)

zyxel nwa110axMatch-

Node

AND

zyxel nwa1123-ac_hd_firmwareRange≤6.25(abin.9)

zyxel nwa1123-ac_hdMatch-

Node

AND

zyxel nwa1123-ac-pro_firmwareRange≤6.28(abhd.0)

zyxel nwa1123-ac-proMatch-

Node

AND

zyxel nwa1123acv3_firmwareRange≤6.50(abvt.0)

zyxel nwa1123acv3Match-

Node

AND

zyxel nwa210ax_firmwareRange≤6.50(abtd.2)

zyxel nwa210axMatch-

Node

AND

zyxel nwa220ax-6e_firmwareRange≤6.50(acco.2)

zyxel nwa220ax-6eMatch-

Node

AND

zyxel nwa50ax_firmwareRange≤6.55(acge.1)

zyxel nwa50axMatch-

Node

AND

zyxel nwa50ax-pro_firmwareRange≤6.50(acge.0)

zyxel nwa50ax-proMatch-

Node

AND

zyxel nwa5123-ac_hd_firmwareRange≤6.25(abim.9)

zyxel nwa5123-ac_hdMatch-

Node

AND

zyxel nwa55axe_firmwareRange≤6.29(abzl.1)

zyxel nwa55axeMatch-

Node

AND

zyxel nwa90ax_firmwareRange≤6.29(accv.1)

zyxel nwa90axMatch-

Node

AND

zyxel nwa90ax-pro_firmwareRange≤6.50(acgf.0)

zyxel nwa90ax-proMatch-

Node

AND

zyxel wac500_firmwareRange≤6.50(abvs.0)

zyxel wac500Match-

Node

AND

zyxel wac500h_firmwareRange≤6.50(abwa.0)

zyxel wac500hMatch-

Node

AND

zyxel wac5302d-sv2_firmwareRange≤6.25(abvz.9)

zyxel wac5302d-sv2Match-

Node

AND

zyxel wac6103d-i_firmwareRange≤6.28(aaxh.0)

zyxel wac6103d-iMatch-

Node

AND

zyxel wac6303d-s_firmwareRange≤6.25(abgl.9)

zyxel wac6303d-sMatch-

Node

AND

zyxel wac6502d-e_firmwareRange≤6.28(aasd.0)

zyxel wac6502d-eMatch-

Node

AND

zyxel wac6502d-s_firmwareRange≤6.28(aase.0)

zyxel wac6502d-sMatch-

Node

AND

zyxel wac6503d-s_firmwareRange≤6.28(aasf.0)

zyxel wac6503d-sMatch-

Node

AND

zyxel wac6552d-s_firmwareRange≤6.28(abio.0)

zyxel wac6552d-sMatch-

Node

AND

zyxel wac6553d-e_firmwareRange≤6.28(aasg.0)

zyxel wac6553d-eMatch-

Node

AND

zyxel wax510d_firmwareRange≤6.50(abtf.2)

zyxel wax510dMatch-

Node

AND

zyxel wax610d_firmwareRange≤6.50(abte.2)

zyxel wax610dMatch-

Node

AND

zyxel wax620d-6e_firmwareRange≤6.50(accn.2)

zyxel wax620d-6eMatch-

Node

AND

zyxel wax630s_firmwareRange≤6.50(abzd.2)

zyxel wax630sMatch-

Node

AND

zyxel wax640s-6e_firmwareRange≤6.50(accm.2)

zyxel wax640s-6eMatch-

Node

AND

zyxel wax650s_firmwareRange≤6.50(abrm.2)

zyxel wax650sMatch-

Node

AND

zyxel wax655e_firmwareRange≤6.50(acdo.2)

zyxel wax655eMatch-

[
  {
    "vendor": "Zyxel",
    "product": "ATP series firmware",
    "versions": [
      {
        "version": "4.32 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "USG FLEX series firmware",
    "versions": [
      {
        "version": "4.50 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "USG FLEX 50(W) firmware",
    "versions": [
      {
        "version": "4.16 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "USG20(W)-VPN firmware",
    "versions": [
      {
        "version": "4.16 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "VPN series firmware",
    "versions": [
      {
        "version": "4.30 through 5.35",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "NWA110AX firmware",
    "versions": [
      {
        "version": "<= 6.50(ABTG.2)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "WAC500 firmware",
    "versions": [
      {
        "version": "<= 6.50(ABVS.0)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zyxel",
    "product": "WAX510D firmware",
    "versions": [
      {
        "version": "<= 6.50(ABTF.2)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps

17 Jun 2026 05:36Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

EPSS0.00771

CWE-359