USG20(W)-VPN firmware vulnerabilities

6 known vulnerabilities in USG20(W)-VPN firmware from Zyxel. 6 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Zyxel Multiple Firewalls Buffer Overflow Exploited

  CVE-2023-33010May 24, 2023ZyxelEPSS 29%

  A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN

• 9.8 Critical severity

  Zyxel Multiple Firewalls Buffer Overflow Exploited

  CVE-2023-33009May 24, 2023ZyxelEPSS 28.1%

  A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN

• 8.8 High severity

  ATP series firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-27991Apr 24, 2023ZyxelEPSS 1.45%

  The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware v

• 7.5 High severity

  ATP series firmware: Buffer Copy without Checking Size of Input

  CVE-2023-22917Apr 24, 2023Zyxel

  A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50(W) firmware versions 5.10 through 5.32, USG20(W)-VPN firmware versions 5.1

• 8.1 High severity

  The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX…

  CVE-2023-22916Apr 24, 2023Zyxel

  The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00 through 5.35, USG FLEX 50(W) firmware versions 5.10 through 5.35, USG20(W)-VPN firmware versions 5.10 through 5.35, and VPN series firmware

• 7.5 High severity

  USG FLEX series firmware: Buffer Copy without Checking Size of Input

  CVE-2023-22915Apr 24, 2023ZyxelEPSS 1.05%

  A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.30 through 5.35, USG20(W)-VPN firmware versions 4.30 through 5.35, and VPN series firmware