CVE-2023-33011

Summary

CVE-2023-33011 is a format string vulnerability affecting various Zyxel ATP, USG FLEX, USG FLEX 50(W), and VPN firmware versions. This issue, present in firmware releases 5.10 through 5.36 Patch 2, can be exploited by unauthenticated attackers on the LAN. By manipulating a PPPoE configuration, an attacker can take advantage of this weakness and execute certain OS commands on the affected device. This can lead to potential security risks and unauthorized system access when the cloud management mode is enabled.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.