CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28767

The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, USG FLEX 50(W) series firmware versions 5.10 through 5.36, USG20(W)-VPN series firmware versions 5.10 through 5.36, and VPN series firmware versions 5.00 through 5.36. An unauthenticated, LAN-based attacker could leverage the vulnerability to inject some operating system (OS) commands into the device configuration data on an affected device when the cloud management mode is enabled.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.0%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-28767

Zyxel » Usg 20w-Vpn » Version: N/A

cpe:2.3:h:zyxel:usg_20w-vpn:-
Zyxel » Usg 2200-Vpn » Version: N/A

cpe:2.3:h:zyxel:usg_2200-vpn:-
Zyxel » Usg Flex 100 » Version: N/A

cpe:2.3:h:zyxel:usg_flex_100:-
Zyxel » Usg Flex 100w » Version: N/A

cpe:2.3:h:zyxel:usg_flex_100w:-
Zyxel » Usg Flex 200 » Version: N/A

cpe:2.3:h:zyxel:usg_flex_200:-
Zyxel » Usg Flex 500 » Version: N/A

cpe:2.3:h:zyxel:usg_flex_500:-
Zyxel » Usg Flex 50 » Version: N/A

cpe:2.3:h:zyxel:usg_flex_50:-
Zyxel » Usg Flex 50w » Version: N/A

cpe:2.3:h:zyxel:usg_flex_50w:-
Zyxel » Usg Flex 700 » Version: N/A

cpe:2.3:h:zyxel:usg_flex_700:-
Zyxel » Zywall Atp100 » Version: N/A

cpe:2.3:h:zyxel:zywall_atp100:-
Zyxel » Zywall Atp100w » Version: N/A

cpe:2.3:h:zyxel:zywall_atp100w:-
Zyxel » Zywall Atp200 » Version: N/A

cpe:2.3:h:zyxel:zywall_atp200:-
Zyxel » Zywall Atp500 » Version: N/A

cpe:2.3:h:zyxel:zywall_atp500:-
Zyxel » Zywall Atp700 » Version: N/A

cpe:2.3:h:zyxel:zywall_atp700:-
Zyxel » Zywall Atp800 » Version: N/A

cpe:2.3:h:zyxel:zywall_atp800:-
Zyxel » Zywall Vpn100 » Version: N/A

cpe:2.3:h:zyxel:zywall_vpn100:-
Zyxel » Zywall Vpn2s » Version: N/A

cpe:2.3:h:zyxel:zywall_vpn2s:-
Zyxel » Zywall Vpn300 » Version: N/A

cpe:2.3:h:zyxel:zywall_vpn300:-
Zyxel » Zywall Vpn50 » Version: N/A

cpe:2.3:h:zyxel:zywall_vpn50:-
Zyxel » Zywall Vpn 100 » Version: N/A

cpe:2.3:h:zyxel:zywall_vpn_100:-
Zyxel » Zywall Vpn 300 » Version: N/A

cpe:2.3:h:zyxel:zywall_vpn_300:-
Zyxel » Zywall Vpn 50 » Version: N/A

cpe:2.3:h:zyxel:zywall_vpn_50:-
Zyxel » Usg 20w-Vpn Firmware » Version: 5.36

cpe:2.3:o:zyxel:usg_20w-vpn_firmware:5.36
Zyxel » Usg 2200-Vpn Firmware » Version: 5.00

cpe:2.3:o:zyxel:usg_2200-vpn_firmware:5.00
Zyxel » Usg Flex 100 Firmware » Version: 5.00

cpe:2.3:o:zyxel:usg_flex_100_firmware:5.00
Zyxel » Usg Flex 100 Firmware » Version: 5.01

cpe:2.3:o:zyxel:usg_flex_100_firmware:5.01
Zyxel » Usg Flex 100 Firmware » Version: 5.10

cpe:2.3:o:zyxel:usg_flex_100_firmware:5.10
Zyxel » Usg Flex 100 Firmware » Version: 5.20

cpe:2.3:o:zyxel:usg_flex_100_firmware:5.20
Zyxel » Usg Flex 100 Firmware » Version: 5.35

cpe:2.3:o:zyxel:usg_flex_100_firmware:5.35
Zyxel » Usg Flex 100 Firmware » Version: 5.36

cpe:2.3:o:zyxel:usg_flex_100_firmware:5.36
Zyxel » Usg Flex 100w Firmware » Version: 5.00

cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.00
Zyxel » Usg Flex 100w Firmware » Version: 5.01

cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.01
Zyxel » Usg Flex 100w Firmware » Version: 5.10

cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.10
Zyxel » Usg Flex 100w Firmware » Version: 5.30

cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.30
Zyxel » Usg Flex 100w Firmware » Version: 5.35

cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.35
Zyxel » Usg Flex 100w Firmware » Version: 5.36

cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.36
Zyxel » Usg Flex 200 Firmware » Version: 5.00

cpe:2.3:o:zyxel:usg_flex_200_firmware:5.00
Zyxel » Usg Flex 200 Firmware » Version: 5.01

cpe:2.3:o:zyxel:usg_flex_200_firmware:5.01
Zyxel » Usg Flex 200 Firmware » Version: 5.20

cpe:2.3:o:zyxel:usg_flex_200_firmware:5.20
Zyxel » Usg Flex 200 Firmware » Version: 5.30

cpe:2.3:o:zyxel:usg_flex_200_firmware:5.30
Zyxel » Usg Flex 200 Firmware » Version: 5.35

cpe:2.3:o:zyxel:usg_flex_200_firmware:5.35
Zyxel » Usg Flex 200 Firmware » Version: 5.36

cpe:2.3:o:zyxel:usg_flex_200_firmware:5.36
Zyxel » Usg Flex 500 Firmware » Version: 5.00

cpe:2.3:o:zyxel:usg_flex_500_firmware:5.00
Zyxel » Usg Flex 500 Firmware » Version: 5.01

cpe:2.3:o:zyxel:usg_flex_500_firmware:5.01
Zyxel » Usg Flex 500 Firmware » Version: 5.10

cpe:2.3:o:zyxel:usg_flex_500_firmware:5.10
Zyxel » Usg Flex 500 Firmware » Version: 5.20

cpe:2.3:o:zyxel:usg_flex_500_firmware:5.20
Zyxel » Usg Flex 500 Firmware » Version: 5.30

cpe:2.3:o:zyxel:usg_flex_500_firmware:5.30
Zyxel » Usg Flex 500 Firmware » Version: 5.35

cpe:2.3:o:zyxel:usg_flex_500_firmware:5.35
Zyxel » Usg Flex 500 Firmware » Version: 5.36

cpe:2.3:o:zyxel:usg_flex_500_firmware:5.36
Zyxel » Usg Flex 50 Firmware » Version: 5.00

cpe:2.3:o:zyxel:usg_flex_50_firmware:5.00
Zyxel » Usg Flex 50 Firmware » Version: 5.10

cpe:2.3:o:zyxel:usg_flex_50_firmware:5.10
Zyxel » Usg Flex 50 Firmware » Version: 5.35

cpe:2.3:o:zyxel:usg_flex_50_firmware:5.35
Zyxel » Usg Flex 50 Firmware » Version: 5.36

cpe:2.3:o:zyxel:usg_flex_50_firmware:5.36
Zyxel » Usg Flex 50w Firmware » Version: 5.00

cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.00
Zyxel » Usg Flex 50w Firmware » Version: 5.10

cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.10
Zyxel » Usg Flex 50w Firmware » Version: 5.30

cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.30
Zyxel » Usg Flex 50w Firmware » Version: 5.35

cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.35
Zyxel » Usg Flex 50w Firmware » Version: 5.36

cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.36
Zyxel » Usg Flex 700 Firmware » Version: 5.00

cpe:2.3:o:zyxel:usg_flex_700_firmware:5.00
Zyxel » Usg Flex 700 Firmware » Version: 5.10

cpe:2.3:o:zyxel:usg_flex_700_firmware:5.10
Zyxel » Usg Flex 700 Firmware » Version: 5.20

cpe:2.3:o:zyxel:usg_flex_700_firmware:5.20
Zyxel » Usg Flex 700 Firmware » Version: 5.30

cpe:2.3:o:zyxel:usg_flex_700_firmware:5.30
Zyxel » Usg Flex 700 Firmware » Version: 5.35

cpe:2.3:o:zyxel:usg_flex_700_firmware:5.35
Zyxel » Usg Flex 700 Firmware » Version: 5.36

cpe:2.3:o:zyxel:usg_flex_700_firmware:5.36
Zyxel » Zywall Atp100 Firmware » Version: Any

cpe:2.3:o:zyxel:zywall_atp100_firmware:*
Zyxel » Zywall Atp100w Firmware » Version: Any

cpe:2.3:o:zyxel:zywall_atp100w_firmware:*
Zyxel » Zywall Atp200 Firmware » Version: Any

cpe:2.3:o:zyxel:zywall_atp200_firmware:*
Zyxel » Zywall Atp500 Firmware » Version: Any

cpe:2.3:o:zyxel:zywall_atp500_firmware:*
Zyxel » Zywall Atp700 Firmware » Version: Any

cpe:2.3:o:zyxel:zywall_atp700_firmware:*
Zyxel » Zywall Atp800 Firmware » Version: Any

cpe:2.3:o:zyxel:zywall_atp800_firmware:*
Zyxel » Zywall Vpn100 Firmware » Version: 5.00

cpe:2.3:o:zyxel:zywall_vpn100_firmware:5.00
Zyxel » Zywall Vpn100 Firmware » Version: 5.01

cpe:2.3:o:zyxel:zywall_vpn100_firmware:5.01
Zyxel » Zywall Vpn2s Firmware » Version: 5.00

cpe:2.3:o:zyxel:zywall_vpn2s_firmware:5.00
Zyxel » Zywall Vpn300 Firmware » Version: 5.00

cpe:2.3:o:zyxel:zywall_vpn300_firmware:5.00
Zyxel » Zywall Vpn300 Firmware » Version: 5.01

cpe:2.3:o:zyxel:zywall_vpn300_firmware:5.01
Zyxel » Zywall Vpn50 Firmware » Version: 5.00

cpe:2.3:o:zyxel:zywall_vpn50_firmware:5.00
Zyxel » Zywall Vpn50 Firmware » Version: 5.01

cpe:2.3:o:zyxel:zywall_vpn50_firmware:5.01
Zyxel » Zywall Vpn 100 Firmware » Version: 5.00

cpe:2.3:o:zyxel:zywall_vpn_100_firmware:5.00
Zyxel » Zywall Vpn 300 Firmware » Version: 5.00

cpe:2.3:o:zyxel:zywall_vpn_300_firmware:5.00
Zyxel » Zywall Vpn 50 Firmware » Version: 5.00

cpe:2.3:o:zyxel:zywall_vpn_50_firmware:5.00

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28767

Products

Pricing

Contact Us