CVE-2023-33011

🗓️ 17 Jul 2023 18:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 19 Views

Format string vulnerability in Zyxel ATP, USG FLEX, and USG20(W)-VPN firmware allows unauthenticated OS command execution

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the Cloud Management mode of the Zyxel USG FLEX, USG FLEX 50(W), USG20(W)-VPN, ATP, and VPN software allows a hacker to execute arbitrary commands.	20 Jul 202300:00	–	bdu_fstec
CNNVD	Zyxel ATP 格式化字符串错误漏洞	17 Jul 202300:00	–	cnnvd
CVE	CVE-2023-33011	17 Jul 202317:15	–	cve
Cvelist	CVE-2023-33011	17 Jul 202317:15	–	cvelist
EUVD	EUVD-2023-37200	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Zyxel products	18 Jul 202300:00	–	ncsc
Prion	Format string	17 Jul 202318:15	–	prion
Positive Technologies	PT-2023-3606 · Zyxel · Zyxel Usg Flex Series +4	17 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-33011	23 May 202502:03	–	redhatcve
Vulnrichment	CVE-2023-33011	17 Jul 202317:15	–	vulnrichment

NVD

Node

zyxel usg_2200-vpn_firmwareRange5.00–5.37

AND

zyxel usg_2200-vpnMatch-

Node

zyxel usg_flex_100_firmwareRange5.00–5.37

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_100w_firmwareRange5.00–5.37

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_200_firmwareRange5.00–5.37

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_50_firmwareRange5.00–5.37

AND

zyxel usg_flex_50Match-

Node

zyxel usg_flex_500_firmwareRange5.00–5.37

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_50w_firmwareRange5.00–5.37

AND

zyxel usg_flex_50wMatch-

Node

zyxel usg_flex_700_firmwareRange5.00–5.37

AND

zyxel usg_flex_700Match-

Node

zyxel zywall_vpn100_firmwareRange5.00–5.37

AND

zyxel zywall_vpn100Match-

Node

zyxel zywall_vpn2s_firmwareRange5.00–5.37

AND

zyxel zywall_vpn2sMatch-

Node

zyxel zywall_vpn300_firmwareRange5.00–5.37

AND

zyxel zywall_vpn300Match-

Node

zyxel zywall_vpn50_firmwareRange5.00–5.37

AND

zyxel zywall_vpn50Match-

Node

zyxel zywall_vpn_100_firmwareRange5.00–5.37

AND

zyxel zywall_vpn_100Match-

Node

zyxel zywall_vpn_300_firmwareRange5.00–5.37

AND

zyxel zywall_vpn_300Match-

Node

zyxel zywall_vpn_50_firmwareRange5.00–5.37

AND

zyxel zywall_vpn_50Match-

Node

zyxel usg_20w-vpn_firmwareRange5.10–5.37

AND

zyxel usg_20w-vpnMatch-

Node

zyxel zywall_atp100_firmwareRange5.10–5.37

AND

zyxel zywall_atp100Match-

Node

zyxel zywall_atp100w_firmwareRange5.10–5.37

AND

zyxel zywall_atp100wMatch-

Node

zyxel zywall_atp200_firmwareRange5.10–5.37

AND

zyxel zywall_atp200Match-

Node

zyxel zywall_atp500_firmwareRange5.10–5.37

AND

zyxel zywall_atp500Match-

Node

zyxel zywall_atp700_firmwareRange5.10–5.37

AND

zyxel zywall_atp700Match-

Node

zyxel zywall_atp800_firmwareRange5.10–5.37

AND

zyxel zywall_atp800Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers

17 Jun 2026 06:00Current

CVSS 3.18.8

EPSS0.00303

format string vulnerability zyxel atp usg flex usg20(w)-vpn os command execution firmware unauthenticated attacker pppoe configuration cloud management mode