CVE-2023-5960

Summary

CVE-2023-5960 is a privilege management vulnerability affecting the hotspot feature of Zyxel USG FLEX series firmware versions 4.50 to 5.37 and VPN series firmware versions 4.30 to 5.37. This issue enables authenticated local attackers to gain unauthorized access to system files on affected devices, potentially resulting in significant security risks. By exploiting this weakness, attackers can potentially install malware, steal sensitive data, or modify configurations, underscoring the importance of updating affected devices as soon as possible. This vulnerability highlights the need for proper privilege management and timely software updates to maintain robust network security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.