Unrated severityNVD Advisory· Published Nov 28, 2023· Updated Aug 2, 2024

CVE-2023-4397

Description

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allow an authenticated local attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/ATP seriesllm-fuzzy2 versions
=5.37+ 1 more
- (no CPE)range: =5.37
- (no CPE)range: 5.37
Zyxel/USG FLEX seriesllm-fuzzy3 versions
=5.37+ 2 more
- (no CPE)range: =5.37
- (no CPE)range: 5.37
- (no CPE)range: 5.37
Zyxel/USG20(W)-VPN seriesllm-fuzzy2 versions
=5.37+ 1 more
- (no CPE)range: =5.37
- (no CPE)range: 5.37

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-apsmitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000