Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-35136
HistoryNov 28, 2023 - 2:15 a.m.

Input validation

2023-11-2802:15:00
PRIOn knowledge base
www.prio-n.com
5
input validation
quagga package
zyxel atp
usg flex
usg20(w)-vpn
firmware vulnerability
authenticated attacker
configuration files access
local attacker

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an authenticated local attacker to access configuration files on an affected device.

CPENameOperatorVersion
zldge4.32
zldle5.37
zldge4.50
zldle5.37
zldge4.16
zldle5.37
zldge4.30
zldle5.37

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-35136