vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-28768

MEDIUM
6.5
CVSS Score
Published: August 14, 2023 at 04:10 PM UTC
Updated: June 17, 2026 at 05:48 AM UTC
22 products affected across 1 vendorXgs2220-30hp FirmwareXgs2220-54hp FirmwareXs1930-12hp Firmware

Using XGS2220-30 firmware by Zyxel?

Get instant alerts when new vulnerabilities affect XGS2220-30 firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

XGS2220-30 firmware· Zyxel
95%
4.80(ABXN.1)4.80(abxn.1)
zyxel-xgs2220-30 (same device)
Xgs2220-30f Firmware· Zyxel
95%
4.80(abye.1)
zyxel-xgs2220-30f (same device)
Xgs2220-30hp Firmware· Zyxel
95%
4.80(abxo.1)
zyxel-xgs2220-30hp (same device)
Xgs2220-54 Firmware· Zyxel
95%
4.80(abxp.1)
zyxel-xgs2220-54 (same device)
Xgs2220-54fp Firmware· Zyxel
95%
4.80(acce.1)
zyxel-xgs2220-54fp (same device)
Xgs2220-54hp Firmware· Zyxel
95%
4.80(abxq.1)
zyxel-xgs2220-54hp (same device)
XMG1930-30 firmware· Zyxel
95%
4.80(ACAR.1)4.80(acar.1)
zyxel-xmg1930-30 (same device)
Xmg1930-30hp Firmware· Zyxel
95%
4.80(acas.1)
zyxel-xmg1930-30hp (same device)
XS1930-10 firmware· Zyxel
95%
4.80(ABQE.1)4.80(abqe.1)
zyxel-xs1930-10 (same device)
Xs1930-12f Firmware· Zyxel
95%
4.80(abzv.1)
zyxel-xs1930-12f (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor AdvisoryPatch
Source: [email protected]
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-xgs2220-xmg1930-and-xs1930-series-switches

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.5MEDIUMZyxel
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-755

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card