CVE-2023-6398

🗓️ 20 Feb 2024 01:34:32Reported by ZyxelType

CVE-2023-6398 Zyxel ATP/USG FLEX/USG FLEX 50(W)/USG20(W)-VPN/NWA50AX/WAC500/WAX300H/WBE660S firmware 4.32-5.37 Patch 1, 4.50-5.37 Patch 1, 4.16-5.37 Patch 1, 4.16-5.37 Patch 1, through 6.29(ABYW.3), through 6.65(ABVS.1), 6.60(ACHF.1), through 6.65(ACGG.1) post-auth command injection via FT

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the File Transfer Protocol (FTP) implementation in the microprogrammed networking devices of ZyXEL USG FLEX, USG FLEX 50(W)/USG20(W)-VPN, USG FLEX H, and ATP allows a perpetrator to execute arbitrary commands.	29 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-6398	20 Feb 202403:31	–	circl
CNNVD	Zyxel ATP Security Vulnerability	20 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-6398	20 Feb 202401:34	–	cvelist
EUVD	EUVD-2023-58635	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6398	20 Feb 202402:15	–	nvd
OSV	CVE-2023-6398	20 Feb 202402:15	–	osv
Prion	Command injection	20 Feb 202402:15	–	prion
Positive Technologies	PT-2023-8711 · Zyxel · Wax300H +6	30 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-6398	23 May 202502:06	–	redhatcve

NVD

Node

AND

zyxel atp100_firmwareRange4.32–5.37

zyxel atp100_firmwareMatch5.37-

zyxel atp100_firmwareMatch5.37patch1

zyxel atp100Match-

Node

AND

zyxel atp100w_firmwareRange4.32–5.37

zyxel atp100w_firmwareMatch5.37-

zyxel atp100w_firmwareMatch5.37patch1

zyxel atp100wMatch-

Node

AND

zyxel atp200_firmwareRange4.32–5.37

zyxel atp200_firmwareMatch5.37-

zyxel atp200_firmwareMatch5.37patch1

zyxel atp200Match-

Node

AND

zyxel atp500_firmwareRange4.32–5.37

zyxel atp500_firmwareMatch5.37-

zyxel atp500_firmwareMatch5.37patch1

zyxel atp500Match-

Node

AND

zyxel atp700_firmwareRange4.32–5.37

zyxel atp700_firmwareMatch5.37-

zyxel atp700_firmwareMatch5.37patch1

zyxel atp700Match-

Node

AND

zyxel atp800_firmwareRange4.32–5.37

zyxel atp800_firmwareMatch5.37-

zyxel atp800_firmwareMatch5.37patch1

zyxel atp800Match-

Node

AND

zyxel usg_flex_100_firmwareRange4.50–5.37

zyxel usg_flex_100_firmwareMatch5.37-

zyxel usg_flex_100_firmwareMatch5.37patch1

zyxel usg_flex_100Match-

Node

AND

zyxel usg_flex_100ax_firmwareRange4.50–5.37

zyxel usg_flex_100ax_firmwareMatch5.37-

zyxel usg_flex_100ax_firmwareMatch5.37patch1

zyxel usg_flex_100axMatch-

Node

AND

zyxel usg_flex_100h_firmwareRange4.50–5.37

zyxel usg_flex_100h_firmwareMatch5.37-

zyxel usg_flex_100h_firmwareMatch5.37patch1

zyxel usg_flex_100hMatch-

Node

AND

zyxel usg_flex_100w_firmwareRange4.50–5.37

zyxel usg_flex_100w_firmwareMatch5.37-

zyxel usg_flex_100w_firmwareMatch5.37patch1

zyxel usg_flex_100wMatch-

Node

AND

zyxel usg_flex_200_firmwareRange4.50–5.37

zyxel usg_flex_200_firmwareMatch5.37-

zyxel usg_flex_200_firmwareMatch5.37patch1

zyxel usg_flex_200Match-

Node

AND

zyxel usg_flex_200h_firmwareRange4.50–5.37

zyxel usg_flex_200h_firmwareMatch5.37-

zyxel usg_flex_200h_firmwareMatch5.37patch1

zyxel usg_flex_200hMatch-

Node

AND

zyxel usg_flex_200hp_firmwareRange4.50–5.37

zyxel usg_flex_200hp_firmwareMatch5.37-

zyxel usg_flex_200hp_firmwareMatch5.37patch1

zyxel usg_flex_200hpMatch-

Node

AND

zyxel usg_flex_50_firmwareRange4.16–5.37

zyxel usg_flex_50_firmwareMatch5.37-

zyxel usg_flex_50_firmwareMatch5.37patch1

zyxel usg_flex_50Match-

Node

AND

zyxel usg_flex_500_firmwareRange4.50–5.37

zyxel usg_flex_500_firmwareMatch5.37-

zyxel usg_flex_500_firmwareMatch5.37patch1

zyxel usg_flex_500Match-

Node

AND

zyxel usg_flex_500h_firmwareRange4.50–5.37

zyxel usg_flex_500h_firmwareMatch5.37-

zyxel usg_flex_500h_firmwareMatch5.37patch1

zyxel usg_flex_500hMatch-

Node

AND

zyxel usg_flex_50w_firmwareRange4.16–5.37

zyxel usg_flex_50w_firmwareMatch5.37-

zyxel usg_flex_50w_firmwareMatch5.37patch1

zyxel usg_flex_50wMatch-

Node

AND

zyxel usg_flex_700_firmwareRange4.50–5.37

zyxel usg_flex_700_firmwareMatch5.37-

zyxel usg_flex_700_firmwareMatch5.37patch1

zyxel usg_flex_700Match-

Node

AND

zyxel usg_flex_700h_firmwareRange4.50–5.37

zyxel usg_flex_700h_firmwareMatch5.37-

zyxel usg_flex_700h_firmwareMatch5.37patch1

zyxel usg_flex_700hMatch-

Node

AND

zyxel usg20-vpn_firmwareRange4.16–5.37

zyxel usg20-vpn_firmwareMatch5.37-

zyxel usg20-vpn_firmwareMatch5.37patch1

zyxel usg20-vpnMatch-

Node

AND

zyxel usg20w-vpn_firmwareRange4.16–5.37

zyxel usg20w-vpn_firmwareMatch5.37-

zyxel usg20w-vpn_firmwareMatch5.37patch1

zyxel usg20w-vpnMatch-

Node

AND

zyxel uosMatch1.10-

zyxel uosMatch1.10patch1

zyxel usg_flex_100hMatch-

zyxel usg_flex_100hpMatch-

zyxel usg_flex_200hMatch-

zyxel usg_flex_200hpMatch-

zyxel usg_flex_500hMatch-

zyxel usg_flex_700hMatch-

Node

AND

zyxel nwa50ax_firmwareRange<6.29(abyw.4)

zyxel nwa50axMatch-

Node

AND

zyxel nwa55axe_firmwareRange<6.29(abzl.4)

zyxel nwa55axeMatch-

Node

AND

zyxel nwa90ax_firmwareRange<6.29(accv.4)

zyxel nwa90axMatch-

Node

AND

zyxel nwa110ax_firmwareRange<6.70(abtg.2)

zyxel nwa110axMatch-

Node

AND

zyxel nwa210ax_firmwareRange<6.70(abtd.2)

zyxel nwa210axMatch-

Node

AND

zyxel nwa220ax-6e_firmwareRange<6.70(acco.1)

zyxel nwa220ax-6eMatch-

Node

AND

zyxel nwa1123acv3_firmwareRange<6.70(abvt.1)

zyxel nwa1123acv3Match-

Node

AND

zyxel wac500_firmwareRange<6.70(abvs.1)

zyxel wac500Match-

Node

AND

zyxel wac500h_firmwareRange<6.70(abwa.1)

zyxel wac500hMatch-

Node

AND

zyxel wax300h_firmwareRange<6.70(achf.1)

zyxel wax300hMatch-

Node

AND

zyxel wax510d_firmwareRange<6.70(abtf.2)

zyxel wax510dMatch-

Node

AND

zyxel wax610d_firmwareRange<6.70(abte.2)

zyxel wax610dMatch-

Node

AND

zyxel wax620d-6e_firmwareRange<6.70(accn.1)

zyxel wax620d-6eMatch-

Node

AND

zyxel wax630s_firmwareRange<6.70(abzd.2)

zyxel wax630sMatch-

Node

AND

zyxel wax640s-6e_firmwareRange<6.70(accm.1)

zyxel wax640s-6eMatch-

Node

AND

zyxel wax650s_firmwareRange<6.70(abrm.2)

zyxel wax650sMatch-

Node

AND

zyxel wax655e_firmwareRange<6.70(acdo.1)

zyxel wax655eMatch-

Node

AND

zyxel wbe660s_firmwareRange<6.70(acgg.2)

zyxel wbe660sMatch-

Node

AND

zyxel nwa50ax-pro_firmwareRange<6.80(acge.0)

zyxel nwa50ax-proMatch-

Node

AND

zyxel nwa90ax-pro_firmwareRange<6.80(acgf.0)

zyxel nwa90ax-proMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.32 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.50 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX 50(W) series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": " version 4.16 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG20(W)-VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.16 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": " NWA50AX firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< 6.29(ABYW.4)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": " WAC500 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< 6.70(ABVS.1)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WAX300H firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< 6.70(ACHF.1)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WBE660S firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< 6.70(ACGG.1)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX H series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 1.10 through 1.10 Patch 1"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-20-2024

17 Jun 2026 06:50Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.2

EPSS0.01333

SSVC

CWE-78