QID 731223

Date Published: 2024-03-01

QID 731223: Zyxel ATP and USG Denial of Service (DoS) Vulnerability

Zyxel ATP and USG devices contains the following security vulnerability:

CVE-2023-6399: A format string vulnerability could allow an authenticated IPSec VPN user to cause DoS conditions against the deviceid daemon by sending a crafted hostname to an affected device if it has the Device Insight feature enabled.

Affected Versions:
Zyxel ATP versions ZLD V5.10 to V5.37 Patch 1
Zyxel USG FLEX ZLD V5.10 to V5.37 Patch 1

QID Detection Logic:
This unauthenticated QID detects vulnerable Zyxel versions based on the self reported information exposed via the zld_product_spec.js source file.

NOTE: Since we currently can not detect the patch level of affected devices, this QID is potential.

Successful exploitation could allow a remote attacker to cause a DoS condition on a targeted system.

CVSS V3 rated as Medium - 5.7 severity.

CVSS V2 rated as Medium - 4.3 severity.

Solution

Customers are advised to upgrade to ZLD V5.37 Patch 2 or later versions to remediate these vulnerabilities. More information can be found >here.

Vendor References

Security Advisory - www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-21-2024

CVEs related to QID 731223

CVE-2023-6399 |

Software Advisories

Advisory ID	Software	Component	Link
Security Advisory			www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-21-2024

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].