CVE-2023-5960
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2023-5960 is a privilege management vulnerability affecting the hotspot feature of Zyxel USG FLEX series firmware versions 4.50 to 5.37 and VPN series firmware versions 4.30 to 5.37. This issue enables authenticated local attackers to gain unauthorized access to system files on affected devices, potentially resulting in significant security risks. By exploiting this weakness, attackers can potentially install malware, steal sensitive data, or modify configurations, underscoring the importance of updating affected devices as soon as possible. This vulnerability highlights the need for proper privilege management and timely software updates to maintain robust network security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- ZyXEL
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions