NetSight
IP …
high8.1

CVE-2023-6764

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firm…

Impact

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37 Patch 1, and USG20(W)-VPN series firmware versions from 4.16 through 5.37 Patch 1 could allow an attacker to achieve unauthorized remote code execution by sending a sequence of specially crafted payloads containing an invalid pointer; however, such an attack would require detailed knowledge of an affected device’s memory layout and configuration.

Affected products

VendorProductAffected versions
ZyxelAtp100 Firmware
from 4.32 before 5.37
Version 5.37
ZyxelAtp100w Firmware
from 4.32 before 5.37
Version 5.37
ZyxelAtp200 Firmware
from 4.32 before 5.37
Version 5.37
ZyxelAtp500 Firmware
from 4.32 before 5.37
Version 5.37
ZyxelAtp700 Firmware
from 4.32 before 5.37
Version 5.37
ZyxelAtp800 Firmware
from 4.32 before 5.37
Version 5.37
ZyxelUsg Flex 100 Firmware
from 4.50 before 5.37
Version 5.37
ZyxelUsg Flex 100ax Firmware
from 4.50 before 5.37
Version 5.37
ZyxelUsg Flex 100h Firmware
from 4.50 before 5.37
Version 5.37
ZyxelUsg Flex 100w Firmware
from 4.50 before 5.37
Version 5.37
ZyxelUsg Flex 200 Firmware
from 4.50 before 5.37
Version 5.37
ZyxelUsg Flex 200h Firmware
from 4.50 before 5.37
Version 5.37

Weakness classification

CWE-134

References