An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions on an affected device by sending a crafted IKE packet.
History

Thu, 17 Oct 2024 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Zyxel atp Firmware
Zyxel usg20w-vpn Firmware
Zyxel usg Flex 50w Firmware
Zyxel usg Flex Firmware
Zyxel vpn Firmware
CPEs cpe:2.3:o:zyxel:atp_firmware:0:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:usg20w-vpn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:usg_flex_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:vpn_firmware:*:*:*:*:*:*:*:*
Vendors & Products Zyxel atp Firmware
Zyxel usg20w-vpn Firmware
Zyxel usg Flex 50w Firmware
Zyxel usg Flex Firmware
Zyxel vpn Firmware
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Zyxel

Published: 2023-11-28T01:48:28.586Z

Updated: 2024-10-17T17:38:37.172Z

Reserved: 2023-08-17T08:27:42.249Z

Link: CVE-2023-4398

cve-icon Vulnrichment

Updated: 2024-08-02T07:24:04.643Z

cve-icon NVD

Status : Modified

Published: 2023-11-28T02:15:43.187

Modified: 2024-11-21T08:35:03.840

Link: CVE-2023-4398

cve-icon Redhat

No data.