VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 20, 2024· Updated Aug 2, 2024

CVE-2023-6399

CVE-2023-6399

Description

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37 Patch 1, USG20(W)-VPN series firmware versions from 4.16 through 5.37 Patch 1, and USG FLEX H series firmware versions from 1.10 through 1.10 Patch 1 could allow an authenticated IPSec VPN user to cause DoS conditions against the “deviceid” daemon by sending a crafted hostname to an affected device if it has the “Device Insight” feature enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Zyxel/ATP seriesllm-fuzzy2 versions
    >=4.32 <=5.37 Patch 1+ 1 more
    • (no CPE)range: >=4.32 <=5.37 Patch 1
    • (no CPE)range: version 4.32 through 5.37 Patch 1
  • Zyxel/USG FLEX seriesllm-fuzzy4 versions
    >=4.50 through 5.37 Patch 1+ 3 more
    • (no CPE)range: >=4.50 through 5.37 Patch 1
    • (no CPE)range: version 4.16 through 5.37 Patch 1
    • (no CPE)range: version 1.10 through 1.10 Patch 1
    • (no CPE)range: version 4.50 through 5.37 Patch 1
  • Zyxel/USG20(W)-VPN seriescpe-rescue
    Range: version 4.16 through 5.37 Patch 1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.