CVE-2023-4397

MEDIUM

4.4

CVSS Score

Published: November 28, 2023 at 01:42 AM UTC

Updated: June 17, 2026 at 06:37 AM UTC

20 products affected across 1 vendorZldUsg Flex 200Usg Flex 500

Using ATP series firmware by Zyxel?

Get instant alerts when new vulnerabilities affect ATP series firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.4

Exploit prediction

EPSS 0.2%

Description

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allow an authenticated local attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing the CLI command with crafted strings on an affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Zld · Zyxel

95%

5.37

zyxel-atp100 (environment) · zyxel-atp100w (environment) · zyxel-atp200 (environment) · zyxel-atp500 (environment) · zyxel-atp700 (environment) · zyxel-atp800 (environment) · zyxel-usg-20w-vpn (environment) · zyxel-usg-flex-100 (environment) · zyxel-usg-flex-100w (environment) · zyxel-usg-flex-200 (environment) · zyxel-usg-flex-50 (environment) · zyxel-usg-flex-500 (environment) · zyxel-usg-flex-50w (environment) · zyxel-usg-flex-700 (environment) · zyxel-vpn50w (environment)

60%

60%

60%

60%