Lucene search

[email protected]CVE-2023-27990

HistoryApr 24, 2023 - 6:15 p.m.

CVE-2023-27990

2023-04-2418:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-27990

xss vulnerability

zyxel atp

usg flex

firmware

admin privileges

malicious scripts

execution

gui logs page

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

4.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:M/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

17.1%

JSON

The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device.

CPENameOperatorVersion
zyxel:atp200_firmwarezyxel atp200 firmwarelt5.36
zyxel:atp200_firmwarezyxel atp200 firmwareeq4.60
zyxel:atp200_firmwarezyxel atp200 firmwareeq4.35\(abfw.3\)c0
zyxel:atp200_firmwarezyxel atp200 firmwareeq4.35
zyxel:atp200_firmwarezyxel atp200 firmwareeq4.32
zyxel:atp200_firmwarezyxel atp200 firmwareeq5.35
zyxel:atp200_firmwarezyxel atp200 firmwareeq5.30
zyxel:atp200_firmwarezyxel atp200 firmwareeq5.10
zyxel:atp200_firmwarezyxel atp200 firmwareeq5.20

CPE	Name	Operator	Version
zyxel:atp200_firmware	zyxel atp200 firmware	lt	5.36
zyxel:atp200_firmware	zyxel atp200 firmware	eq	4.60
zyxel:atp200_firmware	zyxel atp200 firmware	eq	4.35\(abfw.3\)c0
zyxel:atp200_firmware	zyxel atp200 firmware	eq	4.35
zyxel:atp200_firmware	zyxel atp200 firmware	eq	4.32
zyxel:atp200_firmware	zyxel atp200 firmware	eq	5.35
zyxel:atp200_firmware	zyxel atp200 firmware	eq	5.30
zyxel:atp200_firmware	zyxel atp200 firmware	eq	5.10
zyxel:atp200_firmware	zyxel atp200 firmware	eq	5.20

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-and-post-authentication-command-injection-vulnerability-in-firewalls

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

4.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:M/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for CVE-2023-27990

prion1 cvelist1