coldbraid

CVE-2023-33009 Zyxel Multiple Firewalls

Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.

CVSS
not scored

CWE-120

On CISA’s exploited list

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Added
2023-06-05
Federal patch deadline
2023-06-26
Ransomware use
not known