CVE-2023-33010
Description
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
How to fix
Apply updates per vendor instructions.
CISA due date: Jun 26, 2023- zyxel atp100_firmware5.36 or later
- zyxel atp200_firmware5.36 or later
- zyxel atp500_firmware5.36 or later
- zyxel atp100w_firmware5.36 or later
- zyxel atp700_firmware5.36 or later
- zyxel atp800_firmware5.36 or later
- zyxel usg_flex_100_firmware5.36 or later
- zyxel usg_flex_200_firmware5.36 or later
- zyxel usg_flex_500_firmware5.36 or later
- zyxel usg_flex_700_firmware5.36 or later
- zyxel usg_flex_50w_firmware5.36 or later
- zyxel vpn100_firmware5.36 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel atp100_firmware | 4.32 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel atp200_firmware | 4.32 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel atp500_firmware | 4.32 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel atp100w_firmware | 4.32 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel atp700_firmware | 4.32 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel atp800_firmware | 4.32 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel usg_flex_100_firmware | 4.50 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel usg_flex_50_firmware | 5.36 | — |
| zyxel usg_flex_200_firmware | 4.50 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel usg_flex_500_firmware | 4.50 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel usg_flex_700_firmware | 4.50 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel usg_flex_100w_firmware | 5.36 | — |
| zyxel usg_flex_50w_firmware | 4.25 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel usg_20w-vpn_firmware | 5.36 | — |
| zyxel vpn100_firmware | 4.30 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel vpn50_firmware | 4.30 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel vpn300_firmware | 4.30 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel vpn1000_firmware | 4.30 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel usg20-vpn_firmware | 4.30 ≤ v < 5.36, 5.36 | 5.36 |
| zyxel usg_40_firmware | 4.25 ≤ v < 4.73, 4.73 | 4.73 |
| zyxel usg_40w_firmware | 4.25 ≤ v < 4.73, 4.73 | 4.73 |
| zyxel usg_60w_firmware | 4.25 ≤ v < 4.73, 4.73 | 4.73 |
| zyxel usg_60_firmware | 4.25 ≤ v < 4.73, 4.73 | 4.73 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.