Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Advisory: Zyxel ATP series firmware, USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware — zyxel.com/global/en/support/security-advisories/zyxel-secur… Clear all filters
TI-2023-05333 CVE-2023-5797 · GHSA-x5q7-jv6g-p5gv

Improper privilege management in Zyxel ATP series firmware

Priority LOW 24

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware ver…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00212 Published 2023-11-28 No fix listed CWE-269
TI-2023-05197 CVE-2023-5650 · GHSA-2fmp-mw85-gxqw

Improper privilege management in Zyxel ATP series firmware

Priority LOW 24

An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 th…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2023-11-28 No fix listed CWE-269
TI-2023-04062 CVE-2023-4398 · GHSA-rfqw-q592-fp2h

Integer overflow in Zyxel ATP series firmware

Priority MEDIUM 41

An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37,…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00881 Published 2023-11-28 No fix listed CWE-190
TI-2023-04061 CVE-2023-4397 · GHSA-rx6q-hj2g-x8wp

Buffer overflow in Zyxel ATP series firmware

Priority LOW 20

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allo…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00233 Published 2023-11-28 No fix listed CWE-120
TI-2023-19359 CVE-2023-37926 · GHSA-fqwh-r468-g35c

Buffer overflow in Zyxel ATP series firmware

Priority LOW 24

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN se…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00221 Published 2023-11-28 No fix listed CWE-120
TI-2023-19358 CVE-2023-37925 · GHSA-w6g6-83gc-85hx

Improper privilege management in Zyxel ATP series firmware

Priority LOW 24

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware ver…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2023-11-28 No fix listed CWE-269
TI-2023-17585 CVE-2023-35139 · GHSA-wjqc-5477-jpgg

Cross-site scripting in Zyxel ATP series firmware

Priority LOW 28

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG FLEX 50(W) series firmware versions 5.10…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00462 Published 2023-11-28 No fix listed CWE-79
TI-2023-17582 CVE-2023-35136 · GHSA-7pcw-5pmh-x8wr

Improper input validation in Zyxel ATP series firmware

Priority LOW 24

An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00243 Published 2023-11-28 No fix listed CWE-20