Jun 5, 2023

Started

• Closed✓Patched

  Zyxel Multiple Firewalls: 2 exploited vulnerabilities (CVE-2023-33009, CVE-2023-33010)

  Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device. Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID processing function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device. Added to CISA KEV on 2023-06-05.

  Zyxel Multiple Firewalls·Closed Jun 5, 2023·updated Jun 5, 2023