Medium severity6.5NVD Advisory· Published Feb 20, 2024· Updated Jun 17, 2026

CVE-2023-6397

Description

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1 could allow a LAN-based attacker to cause denial-of-service (DoS) conditions by downloading a crafted RAR compressed file onto a LAN-side host if the firewall has the “Anti-Malware” feature enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/Atp100 Firmware3 versions
cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*range: >=4.32,<5.37
- cpe:2.3:o:zyxel:atp100_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:atp100_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Atp100w Firmware3 versions
cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*range: >=4.32,<5.37
- cpe:2.3:o:zyxel:atp100w_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:atp100w_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Atp200 Firmware3 versions
cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*range: >=4.32,<5.37
- cpe:2.3:o:zyxel:atp200_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:atp200_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Atp500 Firmware3 versions
cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*range: >=4.32,<5.37
- cpe:2.3:o:zyxel:atp500_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:atp500_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Atp700 Firmware3 versions
cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*range: >=4.32,<5.37
- cpe:2.3:o:zyxel:atp700_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:atp700_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Atp800 Firmware3 versions
cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*range: >=4.32,<5.37
- cpe:2.3:o:zyxel:atp800_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:atp800_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 100 Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_100_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_100_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 100ax Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_100ax_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_100ax_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_100ax_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_100ax_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 100h Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_100h_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_100h_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_100h_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_100h_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 100w Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 200 Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_200_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_200_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 200h Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_200h_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_200h_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_200h_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_200h_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 200hp Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_200hp_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_200hp_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_200hp_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_200hp_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 500 Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_500_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_500_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 500h Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_500h_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_500h_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_500h_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_500h_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 50 Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_50_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_50_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 50w Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 700 Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_700_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_700_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/Usg Flex 700h Firmware3 versions
cpe:2.3:o:zyxel:usg_flex_700h_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:zyxel:usg_flex_700h_firmware:*:*:*:*:*:*:*:*range: >=4.50,<5.37
- cpe:2.3:o:zyxel:usg_flex_700h_firmware:5.37:-:*:*:*:*:*:*
- cpe:2.3:o:zyxel:usg_flex_700h_firmware:5.37:patch1:*:*:*:*:*:*
Zyxel/ATP seriesllm-fuzzy2 versions
4.32 - 5.37 Patch 1+ 1 more
- (no CPE)range: 4.32 - 5.37 Patch 1
- (no CPE)range: version 4.32 through 5.37 Patch 1
Zyxel/USG FLEX seriesllm-fuzzy2 versions
4.50 - 5.37 Patch 1+ 1 more
- (no CPE)range: 4.50 - 5.37 Patch 1
- (no CPE)range: version 4.50 through 5.37 Patch 1

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-20-2024nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000