Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Summary
| CVE | CVE-2023-33010 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-05-24 13:15:00 UTC |
| Updated | 2023-06-07 18:20:00 UTC |
| Description | A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device. |
Risk And Classification
EPSS: 0.058530000 probability, percentile 0.905160000 (date 2026-04-02)
CISA KEV: Listed on 2023-06-05; due 2023-06-26; ransomware use Unknown
Problem Types: CWE-120
CISA Known Exploited Vulnerability
| Vendor | Zyxel |
|---|---|
| Product | Multiple Firewalls |
| Name | Zyxel Multiple Firewalls Buffer Overflow Vulnerability |
| Required Action | Apply updates per vendor instructions. |
| Notes | https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-33010 |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Zyxel | Atp100 | - | All | All | All |
| Hardware | Zyxel | Atp100w | - | All | All | All |
| Operating System | Zyxel | Atp100w Firmware | All | All | All | All |
| Operating System | Zyxel | Atp100w Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Atp100w Firmware | 5.36 | patch1 | All | All |
| Operating System | Zyxel | Atp100 Firmware | All | All | All | All |
| Operating System | Zyxel | Atp100 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Atp100 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Atp200 | - | All | All | All |
| Operating System | Zyxel | Atp200 Firmware | All | All | All | All |
| Operating System | Zyxel | Atp200 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Atp200 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Atp500 | - | All | All | All |
| Operating System | Zyxel | Atp500 Firmware | All | All | All | All |
| Operating System | Zyxel | Atp500 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Atp500 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Atp700 | - | All | All | All |
| Operating System | Zyxel | Atp700 Firmware | All | All | All | All |
| Operating System | Zyxel | Atp700 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Atp700 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Atp800 | - | All | All | All |
| Operating System | Zyxel | Atp800 Firmware | All | All | All | All |
| Operating System | Zyxel | Atp800 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Atp800 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Usg20-vpn | - | All | All | All |
| Operating System | Zyxel | Usg20-vpn Firmware | All | All | All | All |
| Operating System | Zyxel | Usg20-vpn Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg20-vpn Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Usg 20w-vpn | - | All | All | All |
| Operating System | Zyxel | Usg 20w-vpn Firmware | All | All | All | All |
| Operating System | Zyxel | Usg 20w-vpn Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg 20w-vpn Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Usg 40 | - | All | All | All |
| Hardware | Zyxel | Usg 40w | - | All | All | All |
| Operating System | Zyxel | Usg 40w Firmware | All | All | All | All |
| Operating System | Zyxel | Usg 40w Firmware | 4.73 | - | All | All |
| Operating System | Zyxel | Usg 40w Firmware | 4.73 | patch1 | All | All |
| Operating System | Zyxel | Usg 40 Firmware | All | All | All | All |
| Operating System | Zyxel | Usg 40 Firmware | 4.73 | - | All | All |
| Operating System | Zyxel | Usg 40 Firmware | 4.73 | patch1 | All | All |
| Hardware | Zyxel | Usg 60 | - | All | All | All |
| Hardware | Zyxel | Usg 60w | - | All | All | All |
| Operating System | Zyxel | Usg 60w Firmware | All | All | All | All |
| Operating System | Zyxel | Usg 60w Firmware | 4.73 | - | All | All |
| Operating System | Zyxel | Usg 60w Firmware | 4.73 | patch1 | All | All |
| Operating System | Zyxel | Usg 60 Firmware | All | All | All | All |
| Operating System | Zyxel | Usg 60 Firmware | 4.73 | - | All | All |
| Operating System | Zyxel | Usg 60 Firmware | 4.73 | patch1 | All | All |
| Hardware | Zyxel | Usg Flex 100 | - | All | All | All |
| Hardware | Zyxel | Usg Flex 100w | - | All | All | All |
| Operating System | Zyxel | Usg Flex 100w Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg Flex 100w Firmware | 5.36 | patch1 | All | All |
| Operating System | Zyxel | Usg Flex 100 Firmware | All | All | All | All |
| Operating System | Zyxel | Usg Flex 100 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg Flex 100 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Usg Flex 200 | - | All | All | All |
| Operating System | Zyxel | Usg Flex 200 Firmware | All | All | All | All |
| Operating System | Zyxel | Usg Flex 200 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg Flex 200 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Usg Flex 50 | - | All | All | All |
| Hardware | Zyxel | Usg Flex 500 | - | All | All | All |
| Operating System | Zyxel | Usg Flex 500 Firmware | All | All | All | All |
| Operating System | Zyxel | Usg Flex 500 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg Flex 500 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Usg Flex 50w | - | All | All | All |
| Operating System | Zyxel | Usg Flex 50w Firmware | All | All | All | All |
| Operating System | Zyxel | Usg Flex 50w Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg Flex 50w Firmware | 5.36 | patch1 | All | All |
| Operating System | Zyxel | Usg Flex 50 Firmware | All | All | All | All |
| Operating System | Zyxel | Usg Flex 50 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg Flex 50 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Usg Flex 700 | - | All | All | All |
| Operating System | Zyxel | Usg Flex 700 Firmware | All | All | All | All |
| Operating System | Zyxel | Usg Flex 700 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Usg Flex 700 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Vpn100 | - | All | All | All |
| Hardware | Zyxel | Vpn1000 | - | All | All | All |
| Operating System | Zyxel | Vpn1000 Firmware | All | All | All | All |
| Operating System | Zyxel | Vpn1000 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Vpn1000 Firmware | 5.36 | patch1 | All | All |
| Operating System | Zyxel | Vpn100 Firmware | All | All | All | All |
| Operating System | Zyxel | Vpn100 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Vpn100 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Vpn300 | - | All | All | All |
| Operating System | Zyxel | Vpn300 Firmware | All | All | All | All |
| Operating System | Zyxel | Vpn300 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Vpn300 Firmware | 5.36 | patch1 | All | All |
| Hardware | Zyxel | Vpn50 | - | All | All | All |
| Operating System | Zyxel | Vpn50 Firmware | All | All | All | All |
| Operating System | Zyxel | Vpn50 Firmware | 5.36 | - | All | All |
| Operating System | Zyxel | Vpn50 Firmware | 5.36 | patch1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Zyxel security advisory for multiple buffer overflow vulnerabilities of firewalls | Zyxel Networks | CONFIRM | www.zyxel.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
| CISA Known Exploited Vulnerabilities catalog | CISA | www.cisa.gov | kev |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 731230 Zyxel ATP Firewall Buffer Overflow Vulnerability (CVE-2023-33010)