UF
Product
USG FLEX series firmware
On CISA KEVExploited in the wildRansomware-linked
28
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 12Medium 12Low 0
Watch
Add USG FLEX series firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6399 | 6.5 | Feb 20 | A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX… Affected: version 4.50 through 5.37 Patch 1 |
| CVE-2024-42061 | 6.1 | Sep 3 | A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series… Affected: versions V4.50 through V5.38 |
| CVE-2023-35139 | 6.1 | Nov 28 | A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG… Affected: versions 5.00 through 5.37 |
| CVE-2023-5960 | 5.5 | Nov 28 | An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30… Affected: versions 4.50 through 5.37 |
| CVE-2023-5797 | 5.5 | Nov 28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: versions 4.50 through 5.37 |
| CVE-2023-5650 | 5.5 | Nov 28 | An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG… Affected: versions 4.50 through 5.37 |
| CVE-2023-37926 | 5.5 | Nov 28 | A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware… Affected: versions 4.50 through 5.37 |
| CVE-2023-37925 | 5.5 | Nov 28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: versions 4.50 through 5.37 |
| CVE-2023-35136 | 5.5 | Nov 28 | An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through… Affected: versions 4.50 through 5.37 |
| CVE-2023-6397 | 5.3 | Feb 20 | A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1… Affected: version 4.50 through 5.37 Patch 1 |
| CVE-2024-6343 | 4.9 | Sep 3 | A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG… Affected: versions V4.50 through V5.38 |
| CVE-2023-4397 | 4.4 | Nov 28 | A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN… Affected: 5.37 |
Showing 12