Improper handling of exceptional conditions in Zyxel XGS2220-30 firmware
Priority LOW 29CWE-755Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00303 23rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Zyxel | XGS2220-30 firmware | V4.80(ABXN.1) | — | No fix listed | CNA |
| Zyxel | XMG1930-30 firmware | V4.80(ACAR.1) | — | No fix listed | CNA |
| Zyxel | XS1930-10 firmware | V4.80(ABQE.1) | — | No fix listed | CNA |
- XGS2220-30 firmware VendorZyxel Affected V4.80(ABXN.1) Fixed in — No fix listed CNA
- XMG1930-30 firmware VendorZyxel Affected V4.80(ACAR.1) Fixed in — No fix listed CNA
- XS1930-10 firmware VendorZyxel Affected V4.80(ABQE.1) Fixed in — No fix listed CNA
CPE configurations NVD · 22
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:zyxel:xgs2220-30_firmware:4.80\(abxn.1\):*:*:*:*:*:*:* | 4.80(abxn.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xgs2220-30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xgs2220-30f_firmware:4.80\(abye.1\):*:*:*:*:*:*:* | 4.80(abye.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xgs2220-30f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xgs2220-30hp_firmware:4.80\(abxo.1\):*:*:*:*:*:*:* | 4.80(abxo.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xgs2220-30hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xgs2220-54_firmware:4.80\(abxp.1\):*:*:*:*:*:*:* | 4.80(abxp.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xgs2220-54:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xgs2220-54fp_firmware:4.80\(acce.1\):*:*:*:*:*:*:* | 4.80(acce.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xgs2220-54fp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
- cpe:2.3:o:zyxel:xgs2220-30_firmware:4.80\(abxn.1\):*:*:*:*:*:*:* Versions 4.80(abxn.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xgs2220-30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xgs2220-30f_firmware:4.80\(abye.1\):*:*:*:*:*:*:* Versions 4.80(abye.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xgs2220-30f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xgs2220-30hp_firmware:4.80\(abxo.1\):*:*:*:*:*:*:* Versions 4.80(abxo.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xgs2220-30hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xgs2220-54_firmware:4.80\(abxp.1\):*:*:*:*:*:*:* Versions 4.80(abxp.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xgs2220-54:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xgs2220-54fp_firmware:4.80\(acce.1\):*:*:*:*:*:*:* Versions 4.80(acce.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xgs2220-54fp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
Show 12 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:zyxel:xgs2220-54hp_firmware:4.80\(abxq.1\):*:*:*:*:*:*:* | 4.80(abxq.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xgs2220-54hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xmg1930-30_firmware:4.80\(acar.1\):*:*:*:*:*:*:* | 4.80(acar.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xmg1930-30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xmg1930-30hp_firmware:4.80\(acas.1\):*:*:*:*:*:*:* | 4.80(acas.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xmg1930-30hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xs1930-10_firmware:4.80\(abqe.1\):*:*:*:*:*:*:* | 4.80(abqe.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xs1930-10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xs1930-12f_firmware:4.80\(abzv.1\):*:*:*:*:*:*:* | 4.80(abzv.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xs1930-12f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:xs1930-12hp_firmware:4.80\(abqf.1\):*:*:*:*:*:*:* | 4.80(abqf.1) | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:xs1930-12hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
- cpe:2.3:o:zyxel:xgs2220-54hp_firmware:4.80\(abxq.1\):*:*:*:*:*:*:* Versions 4.80(abxq.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xgs2220-54hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xmg1930-30_firmware:4.80\(acar.1\):*:*:*:*:*:*:* Versions 4.80(acar.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xmg1930-30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xmg1930-30hp_firmware:4.80\(acas.1\):*:*:*:*:*:*:* Versions 4.80(acas.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xmg1930-30hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xs1930-10_firmware:4.80\(abqe.1\):*:*:*:*:*:*:* Versions 4.80(abqe.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xs1930-10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xs1930-12f_firmware:4.80\(abzv.1\):*:*:*:*:*:*:* Versions 4.80(abzv.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xs1930-12f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:xs1930-12hp_firmware:4.80\(abqf.1\):*:*:*:*:*:*:* Versions 4.80(abqf.1) Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:xs1930-12hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-28768
- 2026-10-03 Alias added: GHSA-7vjf-qw8c-2v29
References
More Zyxel Xgs2220-30 Firmware vulnerabilities
- TI-2022-21191 Improper check for unusual conditions in Zyxel GS1920-24v2 firmware CVSS 3.1HIGH 8.2
Sources
- CVE-2023-28768 · CVE Program
- CVE-2023-28768 · NVD
- FIRST EPSS
- GHSA-7vjf-qw8c-2v29 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences