CVE-2023-22918

🗓️ 24 Apr 2023 18:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 23 Views

A vulnerability in Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, NWA110AX, WAC500, and WAX510D firmware may lead to post-authentication information exposure

Reporter	Title	Published	Views	Family All 14
bdu_fstec	The vulnerability of the CGI microprogramming interface of Zyxel ATP, USG FLEX, and VPN devices allows a intruder to gain unauthorized access to protected information.	8 Dec 202300:00	–	bdu_fstec
circl	CVE-2023-22918	24 Apr 202322:19	–	circl
cnnvd	Zyxel ATP 安全漏洞	24 Apr 202300:00	–	cnnvd
cve	CVE-2023-22918	24 Apr 202300:00	–	cve
cvelist	CVE-2023-22918	24 Apr 202300:00	–	cvelist
euvd	EUVD-2023-27020	3 Oct 202520:07	–	euvd
ncsc	Vulnerabilities fixed in Zyxel Firewalls and Access Points	25 Apr 202300:00	–	ncsc
osv	CVE-2023-22918	24 Apr 202318:15	–	osv
prion	Information disclosure	24 Apr 202318:15	–	prion
ptsecurity	PT-2023-06: Unauth Information Exposure leads to Priviledge Escalation in Zyxel products	25 Apr 202300:00	–	ptsecurity

NVD

Node

AND

zyxel atp200_firmwareRange4.32–5.36

zyxel atp200Match-

Node

AND

zyxel atp100_firmwareRange4.32–5.36

zyxel atp100Match-

Node

AND

zyxel atp700_firmwareRange4.32–5.36

zyxel atp700Match-

Node

AND

zyxel atp500_firmwareRange4.32–5.36

zyxel atp500Match-

Node

AND

zyxel atp100w_firmwareRange4.32–5.36

zyxel atp100wMatch-

Node

AND

zyxel atp800_firmwareRange4.32–5.36

zyxel atp800Match-

Node

AND

zyxel usg_flex_100_firmwareRange4.50–5.36

zyxel usg_flex_100Match-

Node

AND

zyxel usg_flex_50_firmwareRange4.50–5.36

zyxel usg_flex_50Match-

Node

AND

zyxel usg_flex_200_firmwareRange4.50–5.36

zyxel usg_flex_200Match-

Node

AND

zyxel usg_flex_500_firmwareRange4.50–5.36

zyxel usg_flex_500Match-

Node

AND

zyxel usg_flex_700_firmwareRange4.50–5.36

zyxel usg_flex_700Match-

Node

AND

zyxel usg_flex_100w_firmwareRange4.50–5.36

zyxel usg_flex_100wMatch-

Node

AND

zyxel usg_20w-vpn_firmwareRange4.16–5.36

zyxel usg_20w-vpnMatch-

Node

AND

zyxel usg_flex_50w_firmwareRange4.16–5.36

zyxel usg_flex_50wMatch-

Node

AND

zyxel usg20-vpn_firmwareRange4.30–5.36

zyxel usg20-vpnMatch-

Node

AND

zyxel vpn100_firmwareRange4.30–5.36

zyxel vpn100Match-

Node

AND

zyxel vpn1000_firmwareRange4.30–5.36

zyxel vpn1000Match-

Node

AND

zyxel vpn300_firmwareRange4.30–5.36

zyxel vpn300Match-

Node

AND

zyxel vpn50_firmwareRange4.30–5.36

zyxel vpn50Match-

Node

AND

zyxel nap203_firmwareRange≤6.28(abfa.0)

zyxel nap203Match-

Node

AND

zyxel nap303_firmwareRange≤6.28(abex.0)

zyxel nap303Match-

Node

AND

zyxel nap353_firmwareRange≤6.28(abey.0)

zyxel nap353Match-

Node

AND

zyxel nwa110ax_firmwareRange≤6.50(abtg.2)

zyxel nwa110axMatch-

Node

AND

zyxel nwa1123-ac_hd_firmwareRange≤6.25(abin.9)

zyxel nwa1123-ac_hdMatch-

Node

AND

zyxel nwa1123-ac-pro_firmwareRange≤6.28(abhd.0)

zyxel nwa1123-ac-proMatch-

Node

AND

zyxel nwa1123acv3_firmwareRange≤6.50(abvt.0)

zyxel nwa1123acv3Match-

Node

AND

zyxel nwa210ax_firmwareRange≤6.50(abtd.2)

zyxel nwa210axMatch-

Node

AND

zyxel nwa220ax-6e_firmwareRange≤6.50(acco.2)

zyxel nwa220ax-6eMatch-

Node

AND

zyxel nwa50ax_firmwareRange≤6.55(acge.1)

zyxel nwa50axMatch-

Node

AND

zyxel nwa50ax-pro_firmwareRange≤6.50(acge.0)

zyxel nwa50ax-proMatch-

Node

AND

zyxel nwa5123-ac_hd_firmwareRange≤6.25(abim.9)

zyxel nwa5123-ac_hdMatch-

Node

AND

zyxel nwa55axe_firmwareRange≤6.29(abzl.1)

zyxel nwa55axeMatch-

Node

AND

zyxel nwa90ax_firmwareRange≤6.29(accv.1)

zyxel nwa90axMatch-

Node

AND

zyxel nwa90ax-pro_firmwareRange≤6.50(acgf.0)

zyxel nwa90ax-proMatch-

Node

AND

zyxel wac500_firmwareRange≤6.50(abvs.0)

zyxel wac500Match-

Node

AND

zyxel wac500h_firmwareRange≤6.50(abwa.0)

zyxel wac500hMatch-

Node

AND

zyxel wac5302d-sv2_firmwareRange≤6.25(abvz.9)

zyxel wac5302d-sv2Match-

Node

AND

zyxel wac6103d-i_firmwareRange≤6.28(aaxh.0)

zyxel wac6103d-iMatch-

Node

AND

zyxel wac6303d-s_firmwareRange≤6.25(abgl.9)

zyxel wac6303d-sMatch-

Node

AND

zyxel wac6502d-e_firmwareRange≤6.28(aasd.0)

zyxel wac6502d-eMatch-

Node

AND

zyxel wac6502d-s_firmwareRange≤6.28(aase.0)

zyxel wac6502d-sMatch-

Node

AND

zyxel wac6503d-s_firmwareRange≤6.28(aasf.0)

zyxel wac6503d-sMatch-

Node

AND

zyxel wac6552d-s_firmwareRange≤6.28(abio.0)

zyxel wac6552d-sMatch-

Node

AND

zyxel wac6553d-e_firmwareRange≤6.28(aasg.0)

zyxel wac6553d-eMatch-

Node

AND

zyxel wax510d_firmwareRange≤6.50(abtf.2)

zyxel wax510dMatch-

Node

AND

zyxel wax610d_firmwareRange≤6.50(abte.2)

zyxel wax610dMatch-

Node

AND

zyxel wax620d-6e_firmwareRange≤6.50(accn.2)

zyxel wax620d-6eMatch-

Node

AND

zyxel wax630s_firmwareRange≤6.50(abzd.2)

zyxel wax630sMatch-

Node

AND

zyxel wax640s-6e_firmwareRange≤6.50(accm.2)

zyxel wax640s-6eMatch-

Node

AND

zyxel wax650s_firmwareRange≤6.50(abrm.2)

zyxel wax650sMatch-

Node

AND

zyxel wax655e_firmwareRange≤6.50(acdo.2)

zyxel wax655eMatch-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps

17 Jun 2026 05:36Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

EPSS0.00771

zyxel atp usg flex usg20(w)-vpn vpn nwa110ax wac500 wax510d vulnerability information exposure firmware remote attacker encrypted information