Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code auszuführen.
Product
Zyxel ist ein Hersteller von Netzwerkkomponenten, u.a. von Firewalls.
Vulnerabilities 4
-
High 8.1
A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 th…
-
High 7.2
A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions f…
-
Medium 6.5
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG F…
-
Medium 5.7
A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series fir…
Revision history
-
#1
Initiale Fassung
References
-
Zyxel security advisory vom 2024-02-19
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-20-2024
-
GitHub Advisory Database vom 2024-02-19
https://github.com/advisories/GHSA-6mfv-h538-gwvr
-
GitHub Advisory Database vom 2024-02-19
https://github.com/advisories/GHSA-83ff-cpf7-ghwf
-
GitHub Advisory Database vom 2024-02-19
https://github.com/advisories/GHSA-p6jh-65c7-8r26
-
GitHub Advisory Database vom 2024-02-19
https://github.com/advisories/GHSA-wj52-rfj4-xjcm