VYPR
Get started
← All advisories
Unrated severityCISA KEVNVD Advisory· Published May 24, 2023· Updated Oct 21, 2025

CVE-2023-33009

CVE-2023-33009

Description

A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.

Affected products

6
  • Zyxel/ATP series firmwarev5
    Range: 4.60 through 5.36 Patch 1
  • Zyxel/USG FLEX series firmwarev5
    Range: 4.60 through 5.36 Patch 1
  • Zyxel/USG FLEX 50(W) firmwarev5
    Range: 4.60 through 5.36 Patch 1
  • Zyxel/USG20(W)-VPN firmwarev5
    Range: 4.60 through 5.36 Patch 1
  • Zyxel/VPN series firmwarev5
    Range: 4.60 through 5.36 Patch 1
  • Zyxel/ZyWALL/USG series firmwarev5
    Range: 4.60 through 4.73 Patch 1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.