CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

544 matches found

NVD•added 2023/05/24 1:15 p.m.•35 views

CVE-2023-33009

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50W firmware versions 4.60 through 5.36 Patch 1, USG20W-VPN firmware versions 4.60 through 5.36 Patch...

9.8CVSS10AI score0.28144EPSS

SaveExploits0References2

NVD•added 2023/05/24 1:15 p.m.•28 views

CVE-2023-33010

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50W firmware versions 4.25 through 5.36 Patch 1, USG20W-VPN firmware versions 4.25 through 5.36 Patc...

9.8CVSS10AI score0.29024EPSS

SaveExploits0References2

attackerkb•added 2023/05/24 1:15 p.m.•51 views

CVE-2023-33009

9.8CVSS8.4AI score0.28144EPSS

SaveIn wildExploits0References2

Prion•added 2023/05/24 1:15 p.m.•41 views

Buffer overflow

7.5CVSS9.9AI score0.28144EPSS

SaveExploits0References1Affected Software23

Prion•added 2023/05/24 1:15 p.m.•36 views

Buffer overflow

7.5CVSS9.9AI score0.29024EPSS

SaveExploits0References1Affected Software23

Rapid7 Vulnerability Database (full)•added 2023/05/24 12:00 a.m.•3 views

CVE-2023-33010: Buffer Copy without Checking Size of Input

9.8CVSS6.6AI score0.29024EPSS

SaveExploits0References2

CVE•added 2023/05/24 12:00 a.m.•601 views

CVE-2023-33009

CVE-2023-33009 is a buffer-overflow vulnerability in the notification function across Zyxel firewall/NGFW families (ATP, USG FLEX, VPN, ZyWALL/USG) with affected firmware ranges roughly 4.60–5.36 Patch 1 (and ZyWALL/USG 4.60–4.73 Patch 1). An unauthenticated attacker could trigger denial-of-servi...

9.8CVSS9.9AI score0.28144EPSS

SaveIn wildExploits0References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/05/24 12:00 a.m.•5 views

CVE-2023-33009: Buffer Copy without Checking Size of Input

9.8CVSS6.5AI score0.28144EPSS

SaveExploits0References2

Cvelist•added 2023/05/24 12:00 a.m.•57 views

CVE-2023-33009

9.8CVSS10AI score0.28144EPSS

SaveExploits0References1

Cvelist•added 2023/05/24 12:00 a.m.•45 views

CVE-2023-33010

9.8CVSS10AI score0.29024EPSS

SaveExploits0References1

attackerkb•added 2023/05/24 12:00 a.m.•45 views

CVE-2023-33010

9.8CVSS9.9AI score0.29024EPSS

SaveIn wildExploits0References2

CVE•added 2023/05/24 12:00 a.m.•621 views

CVE-2023-33010

CVE-2023-33010 is a high-severity (CVSS 3.1: 9.8) buffer overflow in the ID processing function of Zyxel firewalls (ATP, USG FLEX, USG, ZyWALL/VPN) that can be exploited without authentication to cause DoS and remote code execution. Affected firmware ranges include Zyxel ATP 4.32–5.36 Patch 1, US...

9.8CVSS9.9AI score0.29024EPSS

SaveIn wildExploits0References2Affected Software1

Positive Technologies•added 2023/05/24 12:00 a.m.•13 views

PT-2023-2851

Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions 4.32 through 5.36 Patch 1 Zyxel USG FLEX series versions 4.50 through 5.36 Patch 1 Zyxel USG FLEX 50W versions 4.25 through 5.36 Patch 1 Zyxel USG20W-VPN versions 4.25 through 5.36 Patch 1 Zyxel VPN series versions 4....

10CVSS10AI score0.29024EPSS

SaveExploits0References16

BDU FSTEC•added 2023/05/24 12:00 a.m.•33 views

Zyxel ZyWALL/USG Network Device Arbitrary Command Execution

The vulnerability of Zyxel ZyWALL/USG, VPN, USG FLEX, and ATP network devices exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS8.4AI score0.99284EPSS

SaveExploits8References3Affected Software19

The Hacker News•added 2023/04/28 11:41 a.m.•249 views

Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks — Patch Now

Networking equipment maker Zyxel has released patches for a critical security flaw in its firewall devices that could be exploited to achieve remote code execution on affected systems. The issue, tracked as CVE-2023-28771, is rated 9.8 on the CVSS scoring system. Researchers from TRAPA Security...

9.8CVSS9.1AI score0.99284EPSS

SaveExploits8

NVD•added 2023/04/25 2:15 a.m.•42 views

CVE-2023-28771

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to...

9.8CVSS9.9AI score0.99284EPSS

SaveExploits8References3

NCSC•added 2023/04/25 12:00 a.m.•35 views

Vulnerabilities fixed in Zyxel Firewalls and Access Points

Zyxel has fixed vulnerabilities in the firmware of several USG, APT, VPN and ZyWall systems. A malicious party can exploit the vulnerabilities exploit them for attacks that can result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Remote code execution...

9.8CVSS7.8AI score0.99284EPSS

SaveExploits8

Rapid7 Vulnerability Database (full)•added 2023/04/25 12:00 a.m.•4 views

CVE-2023-28771: Improper Neutralization of Special Elements used in an OS Command

9.8CVSS8.4AI score0.99284EPSS

SaveExploits8References3

CVE•added 2023/04/25 12:00 a.m.•778 views

CVE-2023-28771

CVE-2023-28771 is an OS command injection in Zyxel devices (ZyWALL/USG, VPN, USG FLEX, ATP) due to improper error message handling. A unauthenticated attacker can remotely execute commands by sending crafted UDP/IKE-related packets to affected firmware: Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG li...

9.8CVSS9.6AI score0.99284EPSS

SaveIn wildExploits8References3Affected Software1

osv_cve•added 2023/04/24 6:15 p.m.•24 views

CVE-2023-27991

The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50W firmware versions 4.16 through 5.35, USG20W-VPN firmware versions 4.16 through 5.35, and VPN series...

8.8CVSS7.6AI score0.01453EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by