medium6.5
CVE-2023-28768
Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80…
Impact
Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Xgs2220-30 Firmware | Version 4.80\(abxn.1\) |
| Zyxel | Xgs2220-30f Firmware | Version 4.80\(abye.1\) |
| Zyxel | Xgs2220-30hp Firmware | Version 4.80\(abxo.1\) |
| Zyxel | Xgs2220-54 Firmware | Version 4.80\(abxp.1\) |
| Zyxel | Xgs2220-54fp Firmware | Version 4.80\(acce.1\) |
| Zyxel | Xgs2220-54hp Firmware | Version 4.80\(abxq.1\) |
| Zyxel | Xmg1930-30 Firmware | Version 4.80\(acar.1\) |
| Zyxel | Xmg1930-30hp Firmware | Version 4.80\(acas.1\) |
| Zyxel | Xs1930-10 Firmware | Version 4.80\(abqe.1\) |
| Zyxel | Xs1930-12f Firmware | Version 4.80\(abzv.1\) |
| Zyxel | Xs1930-12hp Firmware | Version 4.80\(abqf.1\) |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches