2023-05-24 14:00:36 +00:00
{
"id" : "CVE-2023-33009" ,
"sourceIdentifier" : "security@zyxel.com.tw" ,
"published" : "2023-05-24T13:15:09.560" ,
2024-04-01 16:03:30 +00:00
"lastModified" : "2024-04-01T15:51:48.877" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-06-09 11:28:17 +00:00
"cisaExploitAdd" : "2023-06-05" ,
"cisaActionDue" : "2023-06-26" ,
"cisaRequiredAction" : "Apply updates per vendor instructions." ,
"cisaVulnerabilityName" : "Zyxel Multiple Firewalls Buffer Overflow Vulnerability" ,
2023-05-24 14:00:36 +00:00
"descriptions" : [
{
"lang" : "en" ,
2023-06-15 08:00:57 +00:00
"value" : "A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.\n\n"
2024-04-07 02:03:21 +00:00
} ,
{
"lang" : "es" ,
"value" : "Una vulnerabilidad de desbordamiento de b\u00fafer en la funci\u00f3n de notificaci\u00f3n en las versiones de firmware de la serie Zyxel ATP 4.60 a 5.36 Parche 1, versiones de firmware de la serie USG FLEX 4.60 a 5.36 Parche 1, versiones de firmware USG FLEX 50(W) 4.60 a 5.36 Parche 1, USG20(W)- Las versiones de firmware VPN 4.60 a 5.36, parche 1, las versiones de firmware de la serie VPN 4.60 a 5.36, parche 1, las versiones de firmware de la serie ZyWALL/USG 4.60 a 4.73, parche 1, podr\u00edan permitir que un atacante no autenticado provoque condiciones de denegaci\u00f3n de servicio (DoS) e incluso un ejecuci\u00f3n remota de c\u00f3digo en un dispositivo afectado."
2023-05-24 14:00:36 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
2023-06-09 11:28:17 +00:00
{
2023-06-15 08:00:57 +00:00
"source" : "security@zyxel.com.tw" ,
2023-06-09 11:28:17 +00:00
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 9.8 ,
"baseSeverity" : "CRITICAL"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 5.9
} ,
2023-05-24 14:00:36 +00:00
{
2023-06-15 08:00:57 +00:00
"source" : "nvd@nist.gov" ,
2023-05-24 14:00:36 +00:00
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 9.8 ,
"baseSeverity" : "CRITICAL"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
2023-06-09 11:28:17 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-120"
}
]
} ,
2023-05-24 14:00:36 +00:00
{
"source" : "security@zyxel.com.tw" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-120"
}
]
}
] ,
2023-06-09 11:28:17 +00:00
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
2024-05-19 02:03:31 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
}
]
} ,
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "558978AD-8153-4C1F-A6DE-CCFBF69F754D"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp100_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "C5813B69-C1A3-4695-8B63-17994BBA1723"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp100_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "B61DE8A9-6A73-45EF-8C37-39138F39168A"
}
]
2024-05-19 02:03:31 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-05-19 02:03:31 +00:00
"criteria" : "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
2023-06-09 11:28:17 +00:00
}
]
2024-05-19 02:03:31 +00:00
} ,
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "A32A52F5-5406-4A44-A5C1-42FCDC8C6B22"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp200_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "49FF3D01-C9AA-452C-A079-3180DC8DB269"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp200_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "8ABED29D-8074-46AB-8A0F-759B0653691B"
}
]
2024-05-19 02:03:31 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-05-19 02:03:31 +00:00
"criteria" : "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
2023-06-09 11:28:17 +00:00
}
]
2024-05-19 02:03:31 +00:00
} ,
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "320FC232-D76C-4D8A-8003-7C9A7A287A4C"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp500_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "9801F3AB-4560-44AA-934F-0A6D31F46195"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp500_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "2A0E5B17-00E0-4CB0-9787-D6A8C8E1E0BE"
}
]
2024-05-19 02:03:31 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-05-19 02:03:31 +00:00
"criteria" : "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
2023-06-09 11:28:17 +00:00
}
]
2024-05-19 02:03:31 +00:00
} ,
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "81CB716A-E996-48A6-8C2D-F4B9398FCA77"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "3CBAF763-195F-4B36-A450-719931B86650"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "4CB974EC-859A-4B74-8A60-98A5406E8F43"
}
]
2024-05-19 02:03:31 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-05-19 02:03:31 +00:00
"criteria" : "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0B41F437-855B-4490-8011-DF59887BE6D5"
2023-06-09 11:28:17 +00:00
}
]
2024-05-19 02:03:31 +00:00
} ,
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "2360F0CC-6958-47B6-87A9-B03D52DEBAF8"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp700_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "F4CF847A-A858-43A6-B35B-91455682E382"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp700_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "9BE980D6-9D39-41B9-A35C-1879B72F4146"
}
]
2024-05-19 02:03:31 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-05-19 02:03:31 +00:00
"criteria" : "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "66B99746-0589-46E6-9CBD-F38619AD97DC"
2023-06-09 11:28:17 +00:00
}
]
2024-05-19 02:03:31 +00:00
} ,
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "6C4EE067-E0F0-49B7-8698-8B1AD8E346F0"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp800_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "BA1C872C-9192-410D-86F1-55CDF07DE77C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:atp800_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "EECC0FB9-DED8-4ACF-A627-0537F3EE8C65"
}
]
2024-05-19 02:03:31 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-05-19 02:03:31 +00:00
"criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
2023-06-09 11:28:17 +00:00
}
]
2024-05-19 02:03:31 +00:00
} ,
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "D96CB09A-9AB3-4360-ACFC-A917E7EEC460"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "DA9E3C5E-9447-40D2-9036-6097FF433433"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "12F0F5D8-AC3F-4485-A013-5109FB796FF3"
}
]
2024-05-19 02:03:31 +00:00
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
2024-05-19 02:03:31 +00:00
"criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
2023-06-09 11:28:17 +00:00
}
]
2024-05-19 02:03:31 +00:00
} ,
2023-06-09 11:28:17 +00:00
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-04-01 16:03:30 +00:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.60" ,
"versionEndExcluding" : "5.36" ,
"matchCriteriaId" : "3CF08551-BA8E-47BC-985D-D5ED76A46793"
} ,
2023-06-09 11:28:17 +00:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "EF66A8A2-EE45-43ED-8F5A-FF488AC39943"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "F185DD94-DDA0-4B37-BADE-8468BA08CC02"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "030F29C9-5435-4EA5-B009-895BB2259C19"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "23E7810E-370E-4405-B7A2-C988511BE7B4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "8571FFB9-A90D-4EBD-87C0-F5119D142CEC"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "62ACD903-AC40-451C-B2AB-6F843B3C8897"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "46E17CE0-8EA7-4188-B3E7-DBD1D30C8DC3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "C3D2B551-E080-4F75-A0C7-30D9E684EEEF"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "04A828C5-B71C-43EE-8132-C14C58A52360"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "9A4E9538-EFB8-4181-A48B-D9B09F124B4B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "9ECBAE12-DD16-476C-A2F1-2DF5F334741D"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "D96CB09A-9AB3-4360-ACFC-A917E7EEC460"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "6ED353C3-7BD1-4270-8D70-0B3D51C276E5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "AEA17444-10FA-4B93-A2D3-5D00151C12C6"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "BE7B066A-5AF0-42AF-A341-A91802F588F1"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "206BCF6E-CEB7-4972-B321-ED3CAFD92E76"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "18F99AF2-8419-4ADC-9F46-D53C177BA50F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-04-01 16:03:30 +00:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.60" ,
"versionEndExcluding" : "5.36" ,
"matchCriteriaId" : "9C0AF7BA-8673-4E69-ACEC-8C0DA8DD417B"
} ,
2023-06-09 11:28:17 +00:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "107BB5B9-9C04-4C35-88AD-4D59ECD17778"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "5776089E-F9F4-4A0E-A169-FA1FC4DC6329"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "42F4D9F3-BCBF-4990-B270-3592D69FCC22"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "B5FD9479-4FF2-412C-AB26-5F46FB354653"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "499EA838-5310-4C1C-B9E7-2AB90ACEAA2E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "9C6AFD50-926C-4579-A951-4EFDCBA512F0"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "A7C9CFAA-87BB-4FFE-9191-0A662E58A2F7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "062596D1-4466-46B6-B6B6-4403675B6A3B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "5DCFD02F-5884-4A96-957D-4CEEDB3826BE"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "B41E614E-708B-4793-B10A-E264AC128AC2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "DF398D47-F670-4669-B0BC-9BD9DEC553AC"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "E136FA9E-48A2-428C-9F0A-CD9DB7F91581"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "DA96F7C3-B9DA-4B14-8C69-05A8BC1C4FFA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "3F62D2F9-2D33-4E3F-B641-C721CF34B5C2"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "5.36" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "E4194305-CCA6-4710-94AA-CE0304E1AA44"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg20-vpn_firmware:5.36:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "BC69FAB1-C862-470A-8CBF-BB8751485611"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg20-vpn_firmware:5.36:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "8FD54572-2C29-4D2E-B15A-DE3A16D8E3CA"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg20-vpn:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7239C54F-EC9E-44B4-AE33-1D36E5448219"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_40_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "4.73" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "AEF412BE-51E7-4839-B5D3-C4B29DD550CE"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_40_firmware:4.73:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "97239F61-5715-476B-BD20-B40746AAFE42"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_40_firmware:4.73:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "FA798B77-D4B4-4F21-A543-A6C5AAD7878F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_40:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D84DDB81-DE66-4427-8833-633B45A45A14"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_40w_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "4.73" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "99DA2CD9-A82D-4E08-AE79-360E353B5B21"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_40w_firmware:4.73:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "1C2309AF-4FDB-4564-B2C4-B7BA67F1DA6B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_40w_firmware:4.73:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A04A40D-7093-49E3-A7A7-8C6F148F460F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_40w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8F11F36C-60DB-4D81-A320-53EEE43758C1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_60w_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "4.73" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "E0F73FA6-BD2F-470A-B0D7-AB1C0F210000"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_60w_firmware:4.73:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "4C76684E-0F6D-4D89-8E59-343988366E1D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_60w_firmware:4.73:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "14613F31-56A0-4F5B-9E1A-F316A4508F3F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_60w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "82864EF6-B63D-4947-A18C-AE0156CCA7FA"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_60_firmware:*:*:*:*:*:*:*:*" ,
2024-04-01 16:03:30 +00:00
"versionStartIncluding" : "4.60" ,
2023-06-09 11:28:17 +00:00
"versionEndExcluding" : "4.73" ,
2024-04-01 16:03:30 +00:00
"matchCriteriaId" : "687AD63E-69C0-4D43-AFBB-B67605A4C44B"
2023-06-09 11:28:17 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_60_firmware:4.73:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "02C8DD42-9023-43B9-8B8B-BF9CC79E27E0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:usg_60_firmware:4.73:patch1:*:*:*:*:*:*" ,
"matchCriteriaId" : "8B7249A0-0AE1-4C01-BF04-BD8BA385C84D"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:usg_60:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C65DB5E9-2FE3-4807-970E-A42FDF82B50E"
}
]
}
]
}
] ,
2023-05-24 14:00:36 +00:00
"references" : [
{
"url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls" ,
2023-06-09 11:28:17 +00:00
"source" : "security@zyxel.com.tw" ,
"tags" : [
"Vendor Advisory"
]
2023-05-24 14:00:36 +00:00
}
]
}
