CVE-2023-33011

🗓️ 17 Jul 2023 17:15:45Reported by ZyxelType

CVE-2023-33011 Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN series firmware 5.10-5.36 Patch 2 format string vulnerability allows LAN-based attacker to execute OS commands via crafted PPPoE config

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the Cloud Management mode of the Zyxel USG FLEX, USG FLEX 50(W), USG20(W)-VPN, ATP, and VPN software allows a hacker to execute arbitrary commands.	20 Jul 202300:00	–	bdu_fstec
CNNVD	Zyxel ATP 格式化字符串错误漏洞	17 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-33011	17 Jul 202317:15	–	cvelist
EUVD	EUVD-2023-37200	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel products	18 Jul 202300:00	–	ncsc
NVD	CVE-2023-33011	17 Jul 202318:15	–	nvd
OSV	CVE-2023-33011	17 Jul 202318:15	–	osv
Prion	Format string	17 Jul 202318:15	–	prion
Positive Technologies	PT-2023-3606 · Zyxel · Zyxel Usg Flex Series +4	17 May 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2023-33011: Use of Externally-Controlled Format String	17 Jul 202300:00	–	rapid7

NVD

Node

AND

zyxel usg_2200-vpn_firmwareRange5.00–5.37

zyxel usg_2200-vpnMatch-

Node

AND

zyxel usg_flex_100_firmwareRange5.00–5.37

zyxel usg_flex_100Match-

Node

AND

zyxel usg_flex_100w_firmwareRange5.00–5.37

zyxel usg_flex_100wMatch-

Node

AND

zyxel usg_flex_200_firmwareRange5.00–5.37

zyxel usg_flex_200Match-

Node

AND

zyxel usg_flex_50_firmwareRange5.00–5.37

zyxel usg_flex_50Match-

Node

AND

zyxel usg_flex_500_firmwareRange5.00–5.37

zyxel usg_flex_500Match-

Node

AND

zyxel usg_flex_50w_firmwareRange5.00–5.37

zyxel usg_flex_50wMatch-

Node

AND

zyxel usg_flex_700_firmwareRange5.00–5.37

zyxel usg_flex_700Match-

Node

AND

zyxel zywall_vpn100_firmwareRange5.00–5.37

zyxel zywall_vpn100Match-

Node

AND

zyxel zywall_vpn2s_firmwareRange5.00–5.37

zyxel zywall_vpn2sMatch-

Node

AND

zyxel zywall_vpn300_firmwareRange5.00–5.37

zyxel zywall_vpn300Match-

Node

AND

zyxel zywall_vpn50_firmwareRange5.00–5.37

zyxel zywall_vpn50Match-

Node

AND

zyxel zywall_vpn_100_firmwareRange5.00–5.37

zyxel zywall_vpn_100Match-

Node

AND

zyxel zywall_vpn_300_firmwareRange5.00–5.37

zyxel zywall_vpn_300Match-

Node

AND

zyxel zywall_vpn_50_firmwareRange5.00–5.37

zyxel zywall_vpn_50Match-

Node

AND

zyxel usg_20w-vpn_firmwareRange5.10–5.37

zyxel usg_20w-vpnMatch-

Node

AND

zyxel zywall_atp100_firmwareRange5.10–5.37

zyxel zywall_atp100Match-

Node

AND

zyxel zywall_atp100w_firmwareRange5.10–5.37

zyxel zywall_atp100wMatch-

Node

AND

zyxel zywall_atp200_firmwareRange5.10–5.37

zyxel zywall_atp200Match-

Node

AND

zyxel zywall_atp500_firmwareRange5.10–5.37

zyxel zywall_atp500Match-

Node

AND

zyxel zywall_atp700_firmwareRange5.10–5.37

zyxel zywall_atp700Match-

Node

AND

zyxel zywall_atp800_firmwareRange5.10–5.37

zyxel zywall_atp800Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.10 through 5.36 Patch 2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.00 through 5.36 Patch 2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX 50(W) series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.10 through 5.36 Patch 2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG20(W)-VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.10 through 5.36 Patch 2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "5.00 through 5.36 Patch 2"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers

17 Jun 2026 06:00Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

EPSS0.0034

SSVC

CWE-134