CVE-2023-4397
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Nov 28, 2023
Updated: Dec 4, 2023
CWE ID 79
Summary
CVE-2023-4397 is a buffer overflow vulnerability that affects several Zyxel firmware versions: 5.37 for ATP series, USG FLEX series, USG FLEX 50(W) series, and USG20(W)-VPN series. An authenticated local attacker with administrator privileges can exploit this flaw by inputting crafted strings in a CLI command on an impacted device, leading to denial-of-service (DoS) conditions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share