CVE-2023-6764

🗓️ 20 Feb 2024 02:14:09Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 84 Views

CVE-2023-6764: Format string vulnerability in Zyxel ATP and USG FLEX series firmware

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the IPSec VPN microprogramming software for network devices such as ZyXEL USG FLEX, USG FLEX 50(W)/USG20(W)-VPN, and ATP allows a hacker to execute arbitrary code.	29 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-6764	20 Feb 202404:26	–	circl
CNNVD	Zyxel ATP Formatting String Error Vulnerability	20 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-6764	20 Feb 202402:14	–	cvelist
EUVD	EUVD-2023-58976	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6764	20 Feb 202403:15	–	nvd
OSV	CVE-2023-6764	20 Feb 202403:15	–	osv
Prion	Format string	20 Feb 202403:15	–	prion
Positive Technologies	PT-2023-8710 · Zyxel · Zyxel Atp Series +3	13 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-6764	23 May 202502:06	–	redhatcve

NVD

Node

AND

zyxel atp100_firmwareRange4.32–5.37

zyxel atp100_firmwareMatch5.37-

zyxel atp100_firmwareMatch5.37patch1

zyxel atp100Match-

Node

AND

zyxel atp100w_firmwareRange4.32–5.37

zyxel atp100w_firmwareMatch5.37-

zyxel atp100w_firmwareMatch5.37patch1

zyxel atp100wMatch-

Node

AND

zyxel atp200_firmwareRange4.32–5.37

zyxel atp200_firmwareMatch5.37-

zyxel atp200_firmwareMatch5.37patch1

zyxel atp200Match-

Node

AND

zyxel atp500_firmwareRange4.32–5.37

zyxel atp500_firmwareMatch5.37-

zyxel atp500_firmwareMatch5.37patch1

zyxel atp500Match-

Node

AND

zyxel atp700_firmwareRange4.32–5.37

zyxel atp700_firmwareMatch5.37-

zyxel atp700_firmwareMatch5.37patch1

zyxel atp700Match-

Node

AND

zyxel atp800_firmwareRange4.32–5.37

zyxel atp800_firmwareMatch5.37-

zyxel atp800_firmwareMatch5.37patch1

zyxel atp800Match-

Node

AND

zyxel usg_flex_100_firmwareRange4.50–5.37

zyxel usg_flex_100_firmwareMatch5.37-

zyxel usg_flex_100_firmwareMatch5.37patch1

zyxel usg_flex_100Match-

Node

AND

zyxel usg_flex_100ax_firmwareRange4.50–5.37

zyxel usg_flex_100ax_firmwareMatch5.37-

zyxel usg_flex_100ax_firmwareMatch5.37patch1

zyxel usg_flex_100axMatch-

Node

AND

zyxel usg_flex_100h_firmwareRange4.50–5.37

zyxel usg_flex_100h_firmwareMatch5.37-

zyxel usg_flex_100h_firmwareMatch5.37patch1

zyxel usg_flex_100hMatch-

Node

AND

zyxel usg_flex_100w_firmwareRange4.50–5.37

zyxel usg_flex_100w_firmwareMatch5.37-

zyxel usg_flex_100w_firmwareMatch5.37patch1

zyxel usg_flex_100wMatch-

Node

AND

zyxel usg_flex_200_firmwareRange4.50–5.37

zyxel usg_flex_200_firmwareMatch5.37-

zyxel usg_flex_200_firmwareMatch5.37patch1

zyxel usg_flex_200Match-

Node

AND

zyxel usg_flex_200h_firmwareRange4.50–5.37

zyxel usg_flex_200h_firmwareMatch5.37-

zyxel usg_flex_200h_firmwareMatch5.37patch1

zyxel usg_flex_200hMatch-

Node

AND

zyxel usg_flex_200hp_firmwareRange4.50–5.37

zyxel usg_flex_200hp_firmwareMatch5.37-

zyxel usg_flex_200hp_firmwareMatch5.37patch1

zyxel usg_flex_200hpMatch-

Node

AND

zyxel usg_flex_500_firmwareRange4.50–5.37

zyxel usg_flex_500_firmwareMatch5.37-

zyxel usg_flex_500_firmwareMatch5.37patch1

zyxel usg_flex_500Match-

Node

AND

zyxel usg_flex_500h_firmwareRange4.50–5.37

zyxel usg_flex_500h_firmwareMatch5.37-

zyxel usg_flex_500h_firmwareMatch5.37patch1

zyxel usg_flex_500hMatch-

Node

AND

zyxel usg_flex_700_firmwareRange4.50–5.37

zyxel usg_flex_700_firmwareMatch5.37-

zyxel usg_flex_700_firmwareMatch5.37patch1

zyxel usg_flex_700Match-

Node

AND

zyxel usg_flex_700h_firmwareRange4.50–5.37

zyxel usg_flex_700h_firmwareMatch5.37-

zyxel usg_flex_700h_firmwareMatch5.37patch1

zyxel usg_flex_700hMatch-

Node

AND

zyxel usg_flex_50_firmwareRange4.16–5.37

zyxel usg_flex_50_firmwareMatch5.37-

zyxel usg_flex_50_firmwareMatch5.37patch1

zyxel usg_flex_50Match-

Node

AND

zyxel usg_flex_50w_firmwareRange4.16–5.37

zyxel usg_flex_50w_firmwareMatch5.37-

zyxel usg_flex_50w_firmwareMatch5.37patch1

zyxel usg_flex_50wMatch-

Node

AND

zyxel usg20-vpn_firmwareRange4.16–5.37

zyxel usg20-vpn_firmwareMatch5.37-

zyxel usg20-vpn_firmwareMatch5.37patch1

zyxel usg20-vpnMatch-

Node

AND

zyxel usg20w-vpn_firmwareRange4.16–5.37

zyxel usg20w-vpn_firmwareMatch5.37-

zyxel usg20w-vpn_firmwareMatch5.37patch1

zyxel usg20w-vpnMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ATP series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.32 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.50 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX 50(W) series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.16 through 5.37 Patch 1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG20(W)-VPN series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "version 4.16 through 5.37 Patch 1"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-20-2024

17 Jun 2026 06:51Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.1

EPSS0.00889

SSVC

CWE-134