VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Nov 28, 2023· Updated Jun 17, 2026

CVE-2023-5960

CVE-2023-5960

Description

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Zyxel/Zld
    cpe:2.3:o:zyxel:zld:*:*:*:*:*:*:*:*
    Range: >=4.50,<=5.37
  • Zyxel/VPN seriesllm-fuzzy2 versions
    4.30 - 5.37+ 1 more
    • (no CPE)range: 4.30 - 5.37
    • (no CPE)range: versions 4.30 through 5.37
  • Zyxel/USG FLEX seriesllm-fuzzy2 versions
    4.50 - 5.37+ 1 more
    • (no CPE)range: 4.50 - 5.37
    • (no CPE)range: versions 4.50 through 5.37

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.