VYPR
← All advisories
Unrated severityCISA KEVNVD Advisory· Published May 24, 2023· Updated Oct 21, 2025

CVE-2023-33009

CVE-2023-33009

Description

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Zyxel/ZyWALL/USG seriesllm-create2 versions
    4.60 through 4.73 Patch 1+ 1 more
    • (no CPE)range: 4.60 through 4.73 Patch 1
    • (no CPE)range: 4.60 through 4.73 Patch 1
  • Zyxel/ATP seriesllm-fuzzy2 versions
    4.60 through 5.36 Patch 1+ 1 more
    • (no CPE)range: 4.60 through 5.36 Patch 1
    • (no CPE)range: 4.60 through 5.36 Patch 1
  • Zyxel/USG FLEX seriesllm-fuzzy2 versions
    4.60 through 5.36 Patch 1+ 1 more
    • (no CPE)range: 4.60 through 5.36 Patch 1
    • (no CPE)range: 4.60 through 5.36 Patch 1
  • Zyxel/USG20(W)-VPN firmwarev5
    Range: 4.60 through 5.36 Patch 1
  • Zyxel/USG FLEX 50(W)cpe-rescue
    Range: 4.60 through 5.36 Patch 1
  • Zyxel/VPN seriescpe-rescue
    Range: 4.60 through 5.36 Patch 1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.