CVE-2023-6399

🗓️ 20 Feb 2024 01:42:21Reported by ZyxelType

Zyxel firmware versions 4.32-5.37 Patch 1, USG FLEX, USG FLEX 50(W), USG20(W)-VPN series vulnerable to DoS via crafted hostnam

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the Device Insight function in microprogrammed software for ZyXEL network devices, such as USG FLEX, USG FLEX 50(W)/USG20(W)-VPN, USG FLEX H, and ATP, allows a intruder to cause service interruptions.	29 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-6399	20 Feb 202403:31	–	circl
CNNVD	Zyxel ATP Formatting String Error Vulnerability	20 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-6399	20 Feb 202401:42	–	cvelist
EUVD	EUVD-2023-58636	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6399	20 Feb 202402:15	–	nvd
OSV	CVE-2023-6399	20 Feb 202402:15	–	osv
Prion	Format string	20 Feb 202402:15	–	prion
Positive Technologies	PT-2023-8709 · Zyxel · Zyxel Usg Flex Series +3	30 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-6399	23 May 202502:05	–	redhatcve

NVD

Node

zyxel atp100_firmwareRange5.10–5.37

zyxel atp100_firmwareMatch5.37-

zyxel atp100_firmwareMatch5.37patch1

AND

zyxel atp100Match-

Node

zyxel atp100w_firmwareRange5.10–5.37

zyxel atp100w_firmwareMatch5.37-

zyxel atp100w_firmwareMatch5.37patch1

AND

zyxel atp100wMatch-

Node

zyxel atp200_firmwareRange5.10–5.37

zyxel atp200_firmwareMatch5.37-

zyxel atp200_firmwareMatch5.37patch1

AND

zyxel atp200Match-

Node

zyxel atp500_firmwareRange5.10–5.37

zyxel atp500_firmwareMatch5.37-

zyxel atp500_firmwareMatch5.37patch1

AND

zyxel atp500Match-

Node

zyxel atp700_firmwareRange5.10–5.37

zyxel atp700_firmwareMatch5.37-

zyxel atp700_firmwareMatch5.37patch1

AND

zyxel atp700Match-

Node

zyxel atp800_firmwareRange5.10–5.37

zyxel atp800_firmwareMatch5.37-

zyxel atp800_firmwareMatch5.37patch1

AND

zyxel atp800Match-

Node

zyxel usg_flex_100_firmwareRange5.10–5.37

zyxel usg_flex_100_firmwareMatch5.37-

zyxel usg_flex_100_firmwareMatch5.37patch1

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_100ax_firmwareRange5.10–5.37

zyxel usg_flex_100ax_firmwareMatch5.37-

zyxel usg_flex_100ax_firmwareMatch5.37patch1

AND

zyxel usg_flex_100axMatch-

Node

zyxel usg_flex_100h_firmwareRange5.10–5.37

zyxel usg_flex_100h_firmwareMatch5.37-

zyxel usg_flex_100h_firmwareMatch5.37patch1

AND

zyxel usg_flex_100hMatch-

Node

zyxel usg_flex_100w_firmwareRange5.10–5.37

zyxel usg_flex_100w_firmwareMatch5.37-

zyxel usg_flex_100w_firmwareMatch5.37patch1

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_200_firmwareRange5.10–5.37

zyxel usg_flex_200_firmwareMatch5.37-

zyxel usg_flex_200_firmwareMatch5.37patch1

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_200h_firmwareRange5.10–5.37

zyxel usg_flex_200h_firmwareMatch5.37-

zyxel usg_flex_200h_firmwareMatch5.37patch1

AND

zyxel usg_flex_200hMatch-

Node

zyxel usg_flex_200hp_firmwareRange5.10–5.37

zyxel usg_flex_200hp_firmwareMatch5.37-

zyxel usg_flex_200hp_firmwareMatch5.37patch1

AND

zyxel usg_flex_200hpMatch-

Node

zyxel usg_flex_500_firmwareRange5.10–5.37

zyxel usg_flex_500_firmwareMatch5.37-

zyxel usg_flex_500_firmwareMatch5.37patch1

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_500h_firmwareRange5.10–5.37

zyxel usg_flex_500h_firmwareMatch5.37-

zyxel usg_flex_500h_firmwareMatch5.37patch1

AND

zyxel usg_flex_500hMatch-

Node

zyxel usg_flex_700_firmwareRange5.10–5.37

zyxel usg_flex_700_firmwareMatch5.37-

zyxel usg_flex_700_firmwareMatch5.37patch1

AND

zyxel usg_flex_700Match-

Node

zyxel usg_flex_700h_firmwareRange5.10–5.37

zyxel usg_flex_700h_firmwareMatch5.37-

zyxel usg_flex_700h_firmwareMatch5.37patch1

AND

zyxel usg_flex_700hMatch-

Node

zyxel usg_flex_50_firmwareRange5.10–5.37

zyxel usg_flex_50_firmwareMatch5.37-

zyxel usg_flex_50_firmwareMatch5.37patch1

AND

zyxel usg_flex_50Match-

Node

zyxel usg_flex_50w_firmwareRange5.10–5.37

zyxel usg_flex_50w_firmwareMatch5.37-

zyxel usg_flex_50w_firmwareMatch5.37patch1

AND

zyxel usg_flex_50wMatch-

Node

zyxel usg20-vpn_firmwareRange5.10–5.37

zyxel usg20-vpn_firmwareMatch5.37-

zyxel usg20-vpn_firmwareMatch5.37patch1

AND

zyxel usg20-vpnMatch-

Node

zyxel usg20w-vpn_firmwareRange5.10–5.37

zyxel usg20w-vpn_firmwareMatch5.37-

zyxel usg20w-vpn_firmwareMatch5.37patch1

AND

zyxel usg20w-vpnMatch-

Node

zyxel uosMatch1.10-

zyxel uosMatch1.10patch1

AND

zyxel usg_flex_100hMatch-

zyxel usg_flex_100hpMatch-

zyxel usg_flex_200hMatch-

zyxel usg_flex_200hpMatch-

zyxel usg_flex_500hMatch-

zyxel usg_flex_700hMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.32 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.50 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": " USG FLEX 50(W) series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.16 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG20(W)-VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.16 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX H series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 1.10 through 1.10 Patch 1"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-20-2024

17 Jun 2026 06:50Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.7 - 6.5

EPSS0.00649

SSVC

CWE-134