Lucene search

PRIOn knowledge basePRION:CVE-2023-37926

HistoryNov 28, 2023 - 2:15 a.m.

Buffer overflow

2023-11-2802:15:00

PRIOn knowledge base

www.prio-n.com

zyxel atp

usg flex

usg flex 50(w)

usg20(w)-vpn

vpn

firmware vulnerability

denial-of-service

authenticated attacker

system logs

buffer overflow

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an authenticated local attacker to cause denial-of-service (DoS) conditions by executing the CLI command to dump system logs on an affected device.

CPENameOperatorVersion
zldge4.32
zldle5.37
zldge4.50
zldle5.37
zldge4.16
zldle5.37
zldge4.30
zldle5.37

Name	Operator	Version
zld	ge	4.32
zld	le	5.37
zld	ge	4.50
zld	le	5.37
zld	ge	4.16
zld	le	5.37
zld	ge	4.30
zld	le	5.37

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps