Medium severity6.5NVD Advisory· Published Apr 24, 2023· Updated Jun 17, 2026

CVE-2023-22918

Description

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/Atp100 Firmware
cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*
Range: >=4.32,<5.36
Zyxel/Atp100w Firmware
cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*
Range: >=4.32,<5.36
Zyxel/Atp200 Firmware
cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*
Range: >=4.32,<5.36
Zyxel/Atp500 Firmware
cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*
Range: >=4.32,<5.36
Zyxel/Atp700 Firmware
cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*
Range: >=4.32,<5.36
Zyxel/Atp800 Firmware
cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*
Range: >=4.32,<5.36
Zyxel/Nap203 Firmware
cpe:2.3:o:zyxel:nap203_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(abfa.0\)
Zyxel/Nap303 Firmware
cpe:2.3:o:zyxel:nap303_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(abex.0\)
Zyxel/Nap353 Firmware
cpe:2.3:o:zyxel:nap353_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(abey.0\)
Zyxel/Nwa110ax Firmware
cpe:2.3:o:zyxel:nwa110ax_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(abtg.2\)
Zyxel/Nwa1123ac Pro Firmware
cpe:2.3:o:zyxel:nwa1123-ac-pro_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(abhd.0\)
Zyxel/Nwa1123 Ac Hd Firmware
cpe:2.3:o:zyxel:nwa1123-ac_hd_firmware:*:*:*:*:*:*:*:*
Range: <=6.25\(abin.9\)
Zyxel/Nwa1123acv3 Firmware
cpe:2.3:o:zyxel:nwa1123acv3_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(abvt.0\)
Zyxel/Nwa210ax Firmware
cpe:2.3:o:zyxel:nwa210ax_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(abtd.2\)
Zyxel/Nwa220ax 6e Firmware
cpe:2.3:o:zyxel:nwa220ax-6e_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(acco.2\)
Zyxel/Nwa50ax Pro Firmware
cpe:2.3:o:zyxel:nwa50ax-pro_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(acge.0\)
Zyxel/Nwa50ax Firmware
cpe:2.3:o:zyxel:nwa50ax_firmware:*:*:*:*:*:*:*:*
Range: <=6.55\(acge.1\)
Zyxel/Nwa5123 Ac Hd Firmware
cpe:2.3:o:zyxel:nwa5123-ac_hd_firmware:*:*:*:*:*:*:*:*
Range: <=6.25\(abim.9\)
Zyxel/Nwa55axe Firmware
cpe:2.3:o:zyxel:nwa55axe_firmware:*:*:*:*:*:*:*:*
Range: <=6.29\(abzl.1\)
Zyxel/Nwa90ax Pro Firmware
cpe:2.3:o:zyxel:nwa90ax-pro_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(acgf.0\)
Zyxel/Nwa90ax Firmware
cpe:2.3:o:zyxel:nwa90ax_firmware:*:*:*:*:*:*:*:*
Range: <=6.29\(accv.1\)
Zyxel/Usg20 VPN Firmware2 versions
cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*range: >=4.30,<5.36
- (no CPE)range: 4.16 through 5.35
Zyxel/Usg20w VPN Firmware
cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*
Range: >=4.16,<5.36
Zyxel/Usg Flex 100 Firmware
cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*
Range: >=4.50,<5.36
Zyxel/Usg Flex 100w Firmware
cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*
Range: >=4.50,<5.36
Zyxel/Usg Flex 200 Firmware
cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*
Range: >=4.50,<5.36
Zyxel/Usg Flex 500 Firmware
cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*
Range: >=4.50,<5.36
Zyxel/Usg Flex 50 Firmware
cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*
Range: >=4.50,<5.36
Zyxel/Usg Flex 50w Firmware
cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*
Range: >=4.16,<5.36
Zyxel/Usg Flex 700 Firmware
cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*
Range: >=4.50,<5.36
Zyxel/Vpn1000 Firmware
cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*
Range: >=4.30,<5.36
Zyxel/Vpn100 Firmware
cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*
Range: >=4.30,<5.36
Zyxel/Vpn300 Firmware
cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*
Range: >=4.30,<5.36
Zyxel/Vpn50 Firmware
cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*
Range: >=4.30,<5.36
Zyxel/Wac500 Firmware2 versions
cpe:2.3:o:zyxel:wac500_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:zyxel:wac500_firmware:*:*:*:*:*:*:*:*range: <=6.50\(abvs.0\)
- (no CPE)range: <= 6.50(ABVS.0)
Zyxel/Wac500h Firmware
cpe:2.3:o:zyxel:wac500h_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(abwa.0\)
Zyxel/Wac5302d Sv2 Firmware
cpe:2.3:o:zyxel:wac5302d-sv2_firmware:*:*:*:*:*:*:*:*
Range: <=6.25\(abvz.9\)
Zyxel/Wac6103d I Firmware
cpe:2.3:o:zyxel:wac6103d-i_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(aaxh.0\)
Zyxel/Wac6303d S Firmware
cpe:2.3:o:zyxel:wac6303d-s_firmware:*:*:*:*:*:*:*:*
Range: <=6.25\(abgl.9\)
Zyxel/Wac6502d E Firmware
cpe:2.3:o:zyxel:wac6502d-e_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(aasd.0\)
Zyxel/Wac6502d S Firmware
cpe:2.3:o:zyxel:wac6502d-s_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(aase.0\)
Zyxel/Wac6503d S Firmware
cpe:2.3:o:zyxel:wac6503d-s_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(aasf.0\)
Zyxel/Wac6552d S Firmware
cpe:2.3:o:zyxel:wac6552d-s_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(abio.0\)
Zyxel/Wac6553d E Firmware
cpe:2.3:o:zyxel:wac6553d-e_firmware:*:*:*:*:*:*:*:*
Range: <=6.28\(aasg.0\)
Zyxel/Wax510d Firmware2 versions
cpe:2.3:o:zyxel:wax510d_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:zyxel:wax510d_firmware:*:*:*:*:*:*:*:*range: <=6.50\(abtf.2\)
- (no CPE)range: <= 6.50(ABTF.2)
Zyxel/Wax610d Firmware
cpe:2.3:o:zyxel:wax610d_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(abte.2\)
Zyxel/Wax620d 6e Firmware
cpe:2.3:o:zyxel:wax620d-6e_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(accn.2\)
Zyxel/Wax630s Firmware
cpe:2.3:o:zyxel:wax630s_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(abzd.2\)
Zyxel/Wax640s 6e Firmware
cpe:2.3:o:zyxel:wax640s-6e_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(accm.2\)
Zyxel/Wax650s Firmware
cpe:2.3:o:zyxel:wax650s_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(abrm.2\)
Zyxel/Wax655e Firmware
cpe:2.3:o:zyxel:wax655e_firmware:*:*:*:*:*:*:*:*
Range: <=6.50\(acdo.2\)
Zyxel/WAX510Dllm-create
Range: <=6.50(ABTF.2)
Zyxel/VPN seriesllm-fuzzy2 versions
4.30 - 5.35+ 1 more
- (no CPE)range: 4.30 - 5.35
- (no CPE)range: 4.30 through 5.35
Zyxel/USG FLEX 50(W)llm-fuzzy2 versions
4.16 - 5.35+ 1 more
- (no CPE)range: 4.16 - 5.35
- (no CPE)range: 4.16 through 5.35
Zyxel/USG20-VPNllm-fuzzy
Range: 4.16 - 5.35
Zyxel/NWA110AXllm-fuzzy
Range: <=6.50(ABTG.2)
Zyxel/ATP seriesllm-fuzzy2 versions
4.32 - 5.35+ 1 more
- (no CPE)range: 4.32 - 5.35
- (no CPE)range: 4.32 through 5.35
Zyxel/USG FLEX seriesllm-fuzzy2 versions
4.50 - 5.35+ 1 more
- (no CPE)range: 4.50 - 5.35
- (no CPE)range: 4.50 through 5.35
Zyxel/WAC500llm-fuzzy
Range: <=6.50(ABVS.0)
Zyxel/Nwa1100 N Firmwarecpe-rescue
Range: <= 6.50(ABTG.2)

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-apsnvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000