CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Zyxel Firewalls and VPN Devices ID Processing Function Buffer Overflow Vulnerability (CVE-2023-33010) Security Advisory
[Affected Scope] Specific firmware versions of Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG series
[Impact] Unauthenticated remote attackers can cause denial-of-service (DoS) conditions or execute arbitrary code on the affected device
[Mitigation] Immediately upgrade the device firmware to the latest patched version (v5.36 Patch 2 or v4.73 Patch 2 or higher)
Zyxel Firewall Notification Function Buffer Overflow Vulnerability (CVE-2023-33009) Analysis and Mitigation Guide
[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG series firmware within specific version ranges.
[Impact] An unauthenticated remote attacker can trigger denial-of-service (DoS) conditions or execute arbitrary code on the affected device.
[Mitigation] Immediately upgrade to the latest patched firmware version provided by the vendor and restrict external access to management interfaces.