CVE-2023-22917

🗓️ 24 Apr 2023 17:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 16 Views

Buffer overflow in Zyxel firmware, allow remote unauthenticated attacker to cause core dum

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the microprogrammed software of Zyxel ATP network devices, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, and VPN, arises from the execution of operations beyond the buffer limits in memory. This allows attackers to cause service failures.	6 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-22917	24 Apr 202320:19	–	circl
CNNVD	Zyxel ATP 安全漏洞	24 Apr 202300:00	–	cnnvd
CVE	CVE-2023-22917	24 Apr 202300:00	–	cve
Cvelist	CVE-2023-22917	24 Apr 202300:00	–	cvelist
EUVD	EUVD-2023-27019	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel Firewalls and Access Points	25 Apr 202300:00	–	ncsc
OSV	CVE-2023-22917	24 Apr 202317:15	–	osv
Prion	Buffer overflow	24 Apr 202317:15	–	prion
Positive Technologies	PT-2023-05: Unauth Buffer Overflow in sdwan_iface_ipc in Zyxel products	25 Apr 202300:00	–	ptsecurity

NVD

Node

zyxel usg_flex_100_firmwareRange5.00–5.32

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_100w_firmwareRange5.00–5.32

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_200_firmwareRange5.00–5.32

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_50_firmwareRange5.00–5.32

AND

zyxel usg_flex_50Match-

Node

zyxel usg_flex_50w_firmwareRange5.10–5.32

AND

zyxel usg_flex_50wMatch-

Node

zyxel usg_flex_500_firmwareRange5.00–5.32

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_700_firmwareRange5.00–5.32

AND

zyxel usg_flex_700Match-

Node

zyxel vpn100_firmwareRange5.00–5.35

AND

zyxel vpn100Match-

Node

zyxel vpn1000_firmwareRange5.00–5.35

AND

zyxel vpn1000Match-

Node

zyxel vpn300_firmwareRange5.00–5.35

AND

zyxel vpn300Match-

Node

zyxel vpn50_firmwareRange5.00–5.35

AND

zyxel vpn50Match-

Node

zyxel usg_20w-vpn_firmwareRange5.10–5.32

AND

zyxel usg_20w-vpnMatch-

Node

zyxel atp100_firmwareRange5.10–5.32

AND

zyxel atp100Match-

Node

zyxel atp100w_firmwareRange5.10–5.32

AND

zyxel atp100wMatch-

Node

zyxel atp200_firmwareRange5.10–5.32

AND

zyxel atp200Match-

Node

zyxel atp500_firmwareRange5.10–5.32

AND

zyxel atp500Match-

Node

zyxel atp700_firmwareRange5.10–5.32

AND

zyxel atp700Match-

Node

zyxel atp800_firmwareRange5.10–5.32

AND

zyxel atp800Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps

17 Jun 2026 05:36Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00879

buffer overflow zyxel firmware remote attacker core dump unauthenticated configuration file upload