Lucene search

[email protected]NVD:CVE-2023-5797

HistoryNov 28, 2023 - 3:15 a.m.

CVE-2023-5797

2023-11-2803:15:07

CWE-269

[email protected]

web.nvd.nist.gov

zyxel atp

usg flex

privilege management vulnerability

firmware

authenticated attacker

administrator logs.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

JSON

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access the administrator’s logs on an affected device.

Affected configurations

NVD

Node

zyxelzldRange4.32–5.37

AND

zyxelatp100Match-

zyxelatp100wMatch-

zyxelatp200Match-

zyxelatp500Match-

zyxelatp700Match-

zyxelatp800Match-

Node

zyxelzldRange4.50–5.37

AND

zyxelusg_flex_100Match-

zyxelusg_flex_100wMatch-

zyxelusg_flex_200Match-

zyxelusg_flex_50Match-

zyxelusg_flex_500Match-

zyxelusg_flex_50wMatch-

zyxelusg_flex_700Match-

Node

zyxelzldRange4.16–5.37

AND

zyxelusg_20w-vpnMatch-

zyxelvpn50wMatch-

Node

zyxelzldRange4.30–5.37

AND

zyxelvpn100Match-

zyxelvpn1000Match-

zyxelvpn300Match-

zyxelvpn50Match-

Node

zyxelnwa110ax_firmwareRange<6.70\(abtg.0\)

AND

zyxelnwa110axMatch-

Node

zyxelnwa1123acv3_firmwareRange<6.70\(abvt.0\)

AND

zyxelnwa1123acv3Match-

Node

zyxelnwa210ax_firmwareRange<6.70\(abtd.0\)

AND

zyxelnwa210axMatch-

Node

zyxelnwa220ax-6e_firmwareRange<6.70\(acco.0\)

AND

zyxelnwa220ax-6eMatch-

Node

zyxelnwa50ax_firmwareRange<6.80\(abyw.0\)

AND

zyxelnwa50axMatch-

Node

zyxelnwa50ax-pro_firmwareRange<6.80\(acge.0\)

AND

zyxelnwa50ax-proMatch-

Node

zyxelnwa55axe_firmwareRange<6.80\(abzl.0\)

AND

zyxelnwa55axeMatch-

Node

zyxelnwa90ax_firmwareRange<6.80\(accv.0\)

AND

zyxelnwa90axMatch-

Node

zyxelnwa90ax-pro_firmwareRange<6.80\(acgf.0\)

AND

zyxelnwa90ax-proMatch-

Node

zyxelwac500_firmwareRange<6.70\(abvs.0\)

AND

zyxelwac500Match-

Node

zyxelwac500h_firmwareRange<6.70\(abwa.0\)

AND

zyxelwac500hMatch-

Node

zyxelwax510d_firmwareRange<6.70\(abtf.0\)

AND

zyxelwax510dMatch-

Node

zyxelwax610d_firmwareRange<6.70\(abte.0\)

AND

zyxelwax610dMatch-

Node

zyxelwax620d-6e_firmwareRange<6.70\(accn.0\)

AND

zyxelwax620d-6eMatch-

Node

zyxelwax630s_firmwareRange<6.70\(abzd.0\)

AND

zyxelwax630sMatch-

Node

zyxelwax640s-6e_firmwareRange<6.70\(accm.0\)

AND

zyxelwax640s-6eMatch-

Node

zyxelwax650s_firmwareRange<6.70\(abrm.0\)

AND

zyxelwax650sMatch-

Node

zyxelwax655e_firmwareRange<6.70\(acdo.0\)

AND

zyxelwax655eMatch-

Node

zyxelwbe660s_firmwareRange<6.70\(acgg.0\)

AND

zyxelwbe660sMatch-

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2023-5797

prion1 cvelist1 cve1 nessus1