CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2023-330099.8/CRITICALEPSS 28.1%CISA KEV
2023-05-24

Zyxel Firewall Notification Function Buffer Overflow Vulnerability (CVE-2023-33009) Analysis and Mitigation Guide

[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG series firmware within specific version ranges.

[Impact] An unauthenticated remote attacker can trigger denial-of-service (DoS) conditions or execute arbitrary code on the affected device.

[Mitigation] Immediately upgrade to the latest patched firmware version provided by the vendor and restrict external access to management interfaces.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse