CVE-2023-22918
Summary
| CVE | CVE-2023-22918 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-04-24 18:15:00 UTC |
| Updated | 2023-06-12 15:40:00 UTC |
| Description | A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Zyxel | Atp100 | - | All | All | All |
| Hardware | Zyxel | Atp100w | - | All | All | All |
| Operating System | Zyxel | Atp100w Firmware | All | All | All | All |
| Operating System | Zyxel | Atp100 Firmware | All | All | All | All |
| Hardware | Zyxel | Atp200 | - | All | All | All |
| Operating System | Zyxel | Atp200 Firmware | All | All | All | All |
| Hardware | Zyxel | Atp500 | - | All | All | All |
| Operating System | Zyxel | Atp500 Firmware | All | All | All | All |
| Hardware | Zyxel | Atp700 | - | All | All | All |
| Operating System | Zyxel | Atp700 Firmware | All | All | All | All |
| Hardware | Zyxel | Atp800 | - | All | All | All |
| Operating System | Zyxel | Atp800 Firmware | All | All | All | All |
| Hardware | Zyxel | Nap203 | - | All | All | All |
| Operating System | Zyxel | Nap203 Firmware | All | All | All | All |
| Hardware | Zyxel | Nap303 | - | All | All | All |
| Operating System | Zyxel | Nap303 Firmware | All | All | All | All |
| Hardware | Zyxel | Nap353 | - | All | All | All |
| Operating System | Zyxel | Nap353 Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa110ax | - | All | All | All |
| Operating System | Zyxel | Nwa110ax Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa1123-ac-pro | - | All | All | All |
| Operating System | Zyxel | Nwa1123-ac-pro Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa1123-ac Hd | - | All | All | All |
| Operating System | Zyxel | Nwa1123-ac Hd Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa1123acv3 | - | All | All | All |
| Operating System | Zyxel | Nwa1123acv3 Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa210ax | - | All | All | All |
| Operating System | Zyxel | Nwa210ax Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa220ax-6e | - | All | All | All |
| Operating System | Zyxel | Nwa220ax-6e Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa50ax | - | All | All | All |
| Hardware | Zyxel | Nwa50ax-pro | - | All | All | All |
| Operating System | Zyxel | Nwa50ax-pro Firmware | All | All | All | All |
| Operating System | Zyxel | Nwa50ax Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa5123-ac Hd | - | All | All | All |
| Operating System | Zyxel | Nwa5123-ac Hd Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa55axe | - | All | All | All |
| Operating System | Zyxel | Nwa55axe Firmware | All | All | All | All |
| Hardware | Zyxel | Nwa90ax | - | All | All | All |
| Hardware | Zyxel | Nwa90ax-pro | - | All | All | All |
| Operating System | Zyxel | Nwa90ax-pro Firmware | All | All | All | All |
| Operating System | Zyxel | Nwa90ax Firmware | All | All | All | All |
| Hardware | Zyxel | Usg20-vpn | - | All | All | All |
| Operating System | Zyxel | Usg20-vpn Firmware | All | All | All | All |
| Hardware | Zyxel | Usg 20w-vpn | - | All | All | All |
| Operating System | Zyxel | Usg 20w-vpn Firmware | All | All | All | All |
| Hardware | Zyxel | Usg Flex 100 | - | All | All | All |
| Hardware | Zyxel | Usg Flex 100w | - | All | All | All |
| Operating System | Zyxel | Usg Flex 100w Firmware | All | All | All | All |
| Operating System | Zyxel | Usg Flex 100 Firmware | All | All | All | All |
| Hardware | Zyxel | Usg Flex 200 | - | All | All | All |
| Operating System | Zyxel | Usg Flex 200 Firmware | All | All | All | All |
| Hardware | Zyxel | Usg Flex 50 | - | All | All | All |
| Hardware | Zyxel | Usg Flex 500 | - | All | All | All |
| Operating System | Zyxel | Usg Flex 500 Firmware | All | All | All | All |
| Hardware | Zyxel | Usg Flex 50w | - | All | All | All |
| Operating System | Zyxel | Usg Flex 50w Firmware | All | All | All | All |
| Operating System | Zyxel | Usg Flex 50 Firmware | All | All | All | All |
| Hardware | Zyxel | Usg Flex 700 | - | All | All | All |
| Operating System | Zyxel | Usg Flex 700 Firmware | All | All | All | All |
| Hardware | Zyxel | Vpn100 | - | All | All | All |
| Hardware | Zyxel | Vpn1000 | - | All | All | All |
| Operating System | Zyxel | Vpn1000 Firmware | All | All | All | All |
| Operating System | Zyxel | Vpn100 Firmware | All | All | All | All |
| Hardware | Zyxel | Vpn300 | - | All | All | All |
| Operating System | Zyxel | Vpn300 Firmware | All | All | All | All |
| Hardware | Zyxel | Vpn50 | - | All | All | All |
| Operating System | Zyxel | Vpn50 Firmware | All | All | All | All |
| Hardware | Zyxel | Wac500 | - | All | All | All |
| Hardware | Zyxel | Wac500h | - | All | All | All |
| Operating System | Zyxel | Wac500h Firmware | All | All | All | All |
| Operating System | Zyxel | Wac500 Firmware | All | All | All | All |
| Hardware | Zyxel | Wac5302d-sv2 | - | All | All | All |
| Operating System | Zyxel | Wac5302d-sv2 Firmware | All | All | All | All |
| Hardware | Zyxel | Wac6103d-i | - | All | All | All |
| Operating System | Zyxel | Wac6103d-i Firmware | All | All | All | All |
| Hardware | Zyxel | Wac6303d-s | - | All | All | All |
| Operating System | Zyxel | Wac6303d-s Firmware | All | All | All | All |
| Hardware | Zyxel | Wac6502d-e | - | All | All | All |
| Operating System | Zyxel | Wac6502d-e Firmware | All | All | All | All |
| Hardware | Zyxel | Wac6502d-s | - | All | All | All |
| Operating System | Zyxel | Wac6502d-s Firmware | All | All | All | All |
| Hardware | Zyxel | Wac6503d-s | - | All | All | All |
| Operating System | Zyxel | Wac6503d-s Firmware | All | All | All | All |
| Hardware | Zyxel | Wac6552d-s | - | All | All | All |
| Operating System | Zyxel | Wac6552d-s Firmware | All | All | All | All |
| Hardware | Zyxel | Wac6553d-e | - | All | All | All |
| Operating System | Zyxel | Wac6553d-e Firmware | All | All | All | All |
| Hardware | Zyxel | Wax510d | - | All | All | All |
| Operating System | Zyxel | Wax510d Firmware | All | All | All | All |
| Hardware | Zyxel | Wax610d | - | All | All | All |
| Operating System | Zyxel | Wax610d Firmware | All | All | All | All |
| Hardware | Zyxel | Wax620d-6e | - | All | All | All |
| Operating System | Zyxel | Wax620d-6e Firmware | All | All | All | All |
| Hardware | Zyxel | Wax630s | - | All | All | All |
| Operating System | Zyxel | Wax630s Firmware | All | All | All | All |
| Hardware | Zyxel | Wax640s-6e | - | All | All | All |
| Operating System | Zyxel | Wax640s-6e Firmware | All | All | All | All |
| Hardware | Zyxel | Wax650s | - | All | All | All |
| Operating System | Zyxel | Wax650s Firmware | All | All | All | All |
| Hardware | Zyxel | Wax655e | - | All | All | All |
| Operating System | Zyxel | Wax655e Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Page Not Found | Zyxel Networks | CONFIRM | www.zyxel.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.