Zyxel firewalls denial of service | CVE-2023-34140

NAME
__________
Zyxel firewalls denial of service

Platforms Affected:
Zyxel ATP ZLD 5.31
Zyxel USG FLEX ZLD 5.31
Zyxel USG FLEX 50(W) / USG20(W)-VPN ZLD 5.00
Zyxel VPN ZLD 5.00
Zyxel NXC2500 6.10(AAIG.0)
Zyxel NXC5500 6.10(AAOS.0)

Risk Level:
6.5

Exploitability:
Unproven

Consequences:
Denial of Service

DESCRIPTION
__________

Zyxel firewalls and controllers are vulnerable to a denial of service, caused by a buffer overflow. By sending a specially crafted request to the CAPWAP daemon, a remote attacker within the local network could exploit this vulnerability to cause a denial of service.

CVSS 3.0 Information
__________

Privileges Required:
None

User Interaction:
None

Scope:
Unchanged

Access Vector:
Adjacent Network



A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

 To keep up to date follow us on the below channels.