CVE-2023-4398

🗓️ 28 Nov 2023 01:48:28Reported by ZyxelType

An integer overflow vulnerability in QuickSec IPSec toolkit in Zyxel routers could allow DoS

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the QuickSec IPSec microprogramming software for network devices from Zyxel, including models such as ATP, USG FLEX, USG FLEX50(W), and USG20(W)-VPN, as well as VPN, allows a hacker to cause service interruptions.	29 Nov 202300:00	–	bdu_fstec
CNNVD	Zyxel ATP Input Validation Error Vulnerability	28 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-4398	28 Nov 202301:48	–	cvelist
EUVD	EUVD-2023-54261	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel products	4 Dec 202300:00	–	ncsc
NVD	CVE-2023-4398	28 Nov 202302:15	–	nvd
OSV	CVE-2023-4398	28 Nov 202302:15	–	osv
Prion	Integer overflow	28 Nov 202302:15	–	prion
Positive Technologies	PT-2023-7186 · Zyxel · Zyxel Usg Flex Series +5	27 Nov 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-4398	28 Nov 202301:48	–	vulnrichment

NVD

Node

zyxel zldRange4.32–5.37

AND

zyxel atp100Match-

zyxel atp100wMatch-

zyxel atp200Match-

zyxel atp500Match-

zyxel atp700Match-

zyxel atp800Match-

Node

zyxel zldRange4.50–5.37

AND

zyxel usg_flex_100Match-

zyxel usg_flex_100wMatch-

zyxel usg_flex_200Match-

zyxel usg_flex_50Match-

zyxel usg_flex_500Match-

zyxel usg_flex_50wMatch-

zyxel usg_flex_700Match-

Node

zyxel zldRange4.16–5.37

AND

zyxel usg_20w-vpnMatch-

zyxel vpn50wMatch-

Node

zyxel zldRange4.30–5.37

AND

zyxel vpn100Match-

zyxel vpn1000Match-

zyxel vpn300Match-

zyxel vpn50Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions 4.32 through 5.37"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions 4.50 through 5.37"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX 50(W) series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions 4.16 through 5.37"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG20(W)-VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions 4.16 through 5.37"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "versions 4.30 through 5.37"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps

17 Jun 2026 06:37Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00881

SSVC

CWE-190