Lucene search

PRIOn knowledge basePRION:CVE-2023-5960

HistoryNov 28, 2023 - 3:15 a.m.

Privilege escalation

2023-11-2803:15:00

PRIOn knowledge base

www.prio-n.com

zyxel

usg flex

privilege management

hotspot feature

firmware

vulnerability

authenticated

local attacker

system files

nvd

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device.

CPENameOperatorVersion
zldge4.50
zldle5.37
zldge4.30
zldle5.37

Name	Operator	Version
zld	ge	4.50
zld	le	5.37
zld	ge	4.30
zld	le	5.37

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps