Summary
Ein Angreifer aus dem angrenzenden Netz kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.
Product
Zyxel ist ein Hersteller von Netzwerkkomponenten, u.a. von Firewalls.
Vulnerabilities 7
-
High 8.8
The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through…
-
High 8.8
A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firm…
-
High 8.8CVE-2023-33012 Public exploit
A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.…
-
High 8.8
A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions …
-
High 8.0
A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 thro…
-
High 8.0
A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions…
-
Medium 6.5
A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series fi…
Revision history
-
#1
Initiale Fassung
References
-
Zyxel Security Advisory vom 2023-07-17
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers