CVE-2023-33010criticalunder attackCWE-120

CVE-2023-33010: critical vulnerability in Zyxel ATP series firmware

Published · Updated

Follow this CVE+ Monitor USG FLEX series+ Monitor ATP series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 29%
from disclosure to weapon
Published on NVDMay 24
CISA KEV+12d
Action required by CISAfederal deadline: 2023-06-26

Apply updates per vendor instructions.

In short

A buffer overflow flaw in Zyxel firewall devices allows attackers to crash the device or take control of it by sending specially crafted data to the ID processing function, without needing to log in first.

Technical detail

CWE-120 buffer overflow in the ID processing function across multiple Zyxel ATP, USG FLEX, USG, and VPN series firmware versions (4.25-5.36 Patch 1) permits unauthenticated remote attackers to trigger denial-of-service or achieve remote code execution via malformed input that overflows memory buffers.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Zyxel · ATP series firmwareZyxel · USG20(W)-VPN firmwareZyxel · USG FLEX 50(W) firmwareZyxel · USG FLEX series firmwareZyxel · VPN series firmwareZyxel · ZyWALL/USG series firmware
Related CVEs — Zyxel ATP series firmware

In the same product, most dangerous first.

CVE-2022-30525CRITICALCVE-2022-30525EPSS 99.9%KEVCVE-2023-28771CRITICALCVE-2023-28771EPSS 99.3%KEVCVE-2023-33009CRITICALCVE-2023-33009EPSS 28.1%KEVCVE-2024-11667HIGHCVE-2024-11667EPSS 3.0%KEVCVE-2022-0342CRITICALCVE-2022-0342EPSS 95.1%CVE-2023-33012HIGHCVE-2023-33012EPSS 9.9%