CVE-2023-37925
Description
An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access system files on an affected device.
How to fix
- zyxel nwa50ax_firmware6.80\(abyw.0\) or later
- zyxel nwa110ax_firmware6.70\(abtg.0\) or later
- zyxel nwa1123acv3_firmware6.70\(abvt.0\) or later
- zyxel nwa210ax_firmware6.70\(abtd.0\) or later
- zyxel nwa220ax-6e_firmware6.70\(acco.0\) or later
- zyxel nwa50ax-pro_firmware6.80\(acge.0\) or later
- zyxel nwa55axe_firmware6.80\(abzl.0\) or later
- zyxel nwa90ax_firmware6.80\(accv.0\) or later
- zyxel nwa90ax-pro_firmware6.80\(acgf.0\) or later
- zyxel wac500_firmware6.70\(abvs.0\) or later
- zyxel wac500h_firmware6.70\(abwa.0\) or later
- zyxel wax510d_firmware6.70\(abtf.0\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel nwa50ax_firmware | v < 6.80\(abyw.0\) | 6.80\(abyw.0\) |
| zyxel zld | 4.32 ≤ v ≤ 5.37, 4.50 ≤ v ≤ 5.37, 4.16 ≤ v ≤ 5.37, 4.30 ≤ v ≤ 5.37 | — |
| zyxel nwa110ax_firmware | v < 6.70\(abtg.0\) | 6.70\(abtg.0\) |
| zyxel nwa1123acv3_firmware | v < 6.70\(abvt.0\) | 6.70\(abvt.0\) |
| zyxel nwa210ax_firmware | v < 6.70\(abtd.0\) | 6.70\(abtd.0\) |
| zyxel nwa220ax-6e_firmware | v < 6.70\(acco.0\) | 6.70\(acco.0\) |
| zyxel nwa50ax-pro_firmware | v < 6.80\(acge.0\) | 6.80\(acge.0\) |
| zyxel nwa55axe_firmware | v < 6.80\(abzl.0\) | 6.80\(abzl.0\) |
| zyxel nwa90ax_firmware | v < 6.80\(accv.0\) | 6.80\(accv.0\) |
| zyxel nwa90ax-pro_firmware | v < 6.80\(acgf.0\) | 6.80\(acgf.0\) |
| zyxel wac500_firmware | v < 6.70\(abvs.0\) | 6.70\(abvs.0\) |
| zyxel wac500h_firmware | v < 6.70\(abwa.0\) | 6.70\(abwa.0\) |
| zyxel wax510d_firmware | v < 6.70\(abtf.0\) | 6.70\(abtf.0\) |
| zyxel wax610d_firmware | v < 6.70\(abte.0\) | 6.70\(abte.0\) |
| zyxel wax620d-6e_firmware | v < 6.70\(accn.0\) | 6.70\(accn.0\) |
| zyxel wax630s_firmware | v < 6.70\(abzd.0\) | 6.70\(abzd.0\) |
| zyxel wax640s-6e_firmware | v < 6.70\(accm.0\) | 6.70\(accm.0\) |
| zyxel wax650s_firmware | v < 6.70\(abrm.0\) | 6.70\(abrm.0\) |
| zyxel wax655e_firmware | v < 6.70\(acdo.0\) | 6.70\(acdo.0\) |
| zyxel wbe660s_firmware | v < 6.70\(acgg.0\) | 6.70\(acgg.0\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.