// For flags

CVE-2023-22918

 

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2023-01-10 CVE Reserved
  • 2023-04-24 CVE Published
  • 2024-04-30 EPSS Updated
  • 2024-08-02 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zyxel
Search vendor "Zyxel"
Atp200 Firmware
Search vendor "Zyxel" for product "Atp200 Firmware"
>= 4.32 < 5.36
Search vendor "Zyxel" for product "Atp200 Firmware" and version " >= 4.32 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Atp200
Search vendor "Zyxel" for product "Atp200"
--
Safe
Zyxel
Search vendor "Zyxel"
Atp100 Firmware
Search vendor "Zyxel" for product "Atp100 Firmware"
>= 4.32 < 5.36
Search vendor "Zyxel" for product "Atp100 Firmware" and version " >= 4.32 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Atp100
Search vendor "Zyxel" for product "Atp100"
--
Safe
Zyxel
Search vendor "Zyxel"
Atp700 Firmware
Search vendor "Zyxel" for product "Atp700 Firmware"
>= 4.32 < 5.36
Search vendor "Zyxel" for product "Atp700 Firmware" and version " >= 4.32 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Atp700
Search vendor "Zyxel" for product "Atp700"
--
Safe
Zyxel
Search vendor "Zyxel"
Atp500 Firmware
Search vendor "Zyxel" for product "Atp500 Firmware"
>= 4.32 < 5.36
Search vendor "Zyxel" for product "Atp500 Firmware" and version " >= 4.32 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Atp500
Search vendor "Zyxel" for product "Atp500"
--
Safe
Zyxel
Search vendor "Zyxel"
Atp100w Firmware
Search vendor "Zyxel" for product "Atp100w Firmware"
>= 4.32 < 5.36
Search vendor "Zyxel" for product "Atp100w Firmware" and version " >= 4.32 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Atp100w
Search vendor "Zyxel" for product "Atp100w"
--
Safe
Zyxel
Search vendor "Zyxel"
Atp800 Firmware
Search vendor "Zyxel" for product "Atp800 Firmware"
>= 4.32 < 5.36
Search vendor "Zyxel" for product "Atp800 Firmware" and version " >= 4.32 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Atp800
Search vendor "Zyxel" for product "Atp800"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg Flex 100 Firmware
Search vendor "Zyxel" for product "Usg Flex 100 Firmware"
>= 4.50 < 5.36
Search vendor "Zyxel" for product "Usg Flex 100 Firmware" and version " >= 4.50 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg Flex 100
Search vendor "Zyxel" for product "Usg Flex 100"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg Flex 50 Firmware
Search vendor "Zyxel" for product "Usg Flex 50 Firmware"
>= 4.50 < 5.36
Search vendor "Zyxel" for product "Usg Flex 50 Firmware" and version " >= 4.50 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg Flex 50
Search vendor "Zyxel" for product "Usg Flex 50"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg Flex 200 Firmware
Search vendor "Zyxel" for product "Usg Flex 200 Firmware"
>= 4.50 < 5.36
Search vendor "Zyxel" for product "Usg Flex 200 Firmware" and version " >= 4.50 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg Flex 200
Search vendor "Zyxel" for product "Usg Flex 200"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg Flex 500 Firmware
Search vendor "Zyxel" for product "Usg Flex 500 Firmware"
>= 4.50 < 5.36
Search vendor "Zyxel" for product "Usg Flex 500 Firmware" and version " >= 4.50 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg Flex 500
Search vendor "Zyxel" for product "Usg Flex 500"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg Flex 700 Firmware
Search vendor "Zyxel" for product "Usg Flex 700 Firmware"
>= 4.50 < 5.36
Search vendor "Zyxel" for product "Usg Flex 700 Firmware" and version " >= 4.50 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg Flex 700
Search vendor "Zyxel" for product "Usg Flex 700"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg Flex 100w Firmware
Search vendor "Zyxel" for product "Usg Flex 100w Firmware"
>= 4.50 < 5.36
Search vendor "Zyxel" for product "Usg Flex 100w Firmware" and version " >= 4.50 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg Flex 100w
Search vendor "Zyxel" for product "Usg Flex 100w"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg 20w-vpn Firmware
Search vendor "Zyxel" for product "Usg 20w-vpn Firmware"
>= 4.16 < 5.36
Search vendor "Zyxel" for product "Usg 20w-vpn Firmware" and version " >= 4.16 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg 20w-vpn
Search vendor "Zyxel" for product "Usg 20w-vpn"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg Flex 50w Firmware
Search vendor "Zyxel" for product "Usg Flex 50w Firmware"
>= 4.16 < 5.36
Search vendor "Zyxel" for product "Usg Flex 50w Firmware" and version " >= 4.16 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg Flex 50w
Search vendor "Zyxel" for product "Usg Flex 50w"
--
Safe
Zyxel
Search vendor "Zyxel"
Usg20-vpn Firmware
Search vendor "Zyxel" for product "Usg20-vpn Firmware"
>= 4.30 < 5.36
Search vendor "Zyxel" for product "Usg20-vpn Firmware" and version " >= 4.30 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Usg20-vpn
Search vendor "Zyxel" for product "Usg20-vpn"
--
Safe
Zyxel
Search vendor "Zyxel"
Vpn100 Firmware
Search vendor "Zyxel" for product "Vpn100 Firmware"
>= 4.30 < 5.36
Search vendor "Zyxel" for product "Vpn100 Firmware" and version " >= 4.30 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Vpn100
Search vendor "Zyxel" for product "Vpn100"
--
Safe
Zyxel
Search vendor "Zyxel"
Vpn1000 Firmware
Search vendor "Zyxel" for product "Vpn1000 Firmware"
>= 4.30 < 5.36
Search vendor "Zyxel" for product "Vpn1000 Firmware" and version " >= 4.30 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Vpn1000
Search vendor "Zyxel" for product "Vpn1000"
--
Safe
Zyxel
Search vendor "Zyxel"
Vpn300 Firmware
Search vendor "Zyxel" for product "Vpn300 Firmware"
>= 4.30 < 5.36
Search vendor "Zyxel" for product "Vpn300 Firmware" and version " >= 4.30 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Vpn300
Search vendor "Zyxel" for product "Vpn300"
--
Safe
Zyxel
Search vendor "Zyxel"
Vpn50 Firmware
Search vendor "Zyxel" for product "Vpn50 Firmware"
>= 4.30 < 5.36
Search vendor "Zyxel" for product "Vpn50 Firmware" and version " >= 4.30 < 5.36"
-
Affected
in Zyxel
Search vendor "Zyxel"
Vpn50
Search vendor "Zyxel" for product "Vpn50"
--
Safe
Zyxel
Search vendor "Zyxel"
Nap203 Firmware
Search vendor "Zyxel" for product "Nap203 Firmware"
<= 6.28\(abfa.0\)
Search vendor "Zyxel" for product "Nap203 Firmware" and version " <= 6.28\(abfa.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nap203
Search vendor "Zyxel" for product "Nap203"
--
Safe
Zyxel
Search vendor "Zyxel"
Nap303 Firmware
Search vendor "Zyxel" for product "Nap303 Firmware"
<= 6.28\(abex.0\)
Search vendor "Zyxel" for product "Nap303 Firmware" and version " <= 6.28\(abex.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nap303
Search vendor "Zyxel" for product "Nap303"
--
Safe
Zyxel
Search vendor "Zyxel"
Nap353 Firmware
Search vendor "Zyxel" for product "Nap353 Firmware"
<= 6.28\(abey.0\)
Search vendor "Zyxel" for product "Nap353 Firmware" and version " <= 6.28\(abey.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nap353
Search vendor "Zyxel" for product "Nap353"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa110ax Firmware
Search vendor "Zyxel" for product "Nwa110ax Firmware"
<= 6.50\(abtg.2\)
Search vendor "Zyxel" for product "Nwa110ax Firmware" and version " <= 6.50\(abtg.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa110ax
Search vendor "Zyxel" for product "Nwa110ax"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa1123-ac Hd Firmware
Search vendor "Zyxel" for product "Nwa1123-ac Hd Firmware"
<= 6.25\(abin.9\)
Search vendor "Zyxel" for product "Nwa1123-ac Hd Firmware" and version " <= 6.25\(abin.9\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa1123-ac Hd
Search vendor "Zyxel" for product "Nwa1123-ac Hd"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa1123-ac-pro Firmware
Search vendor "Zyxel" for product "Nwa1123-ac-pro Firmware"
<= 6.28\(abhd.0\)
Search vendor "Zyxel" for product "Nwa1123-ac-pro Firmware" and version " <= 6.28\(abhd.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa1123-ac-pro
Search vendor "Zyxel" for product "Nwa1123-ac-pro"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa1123acv3 Firmware
Search vendor "Zyxel" for product "Nwa1123acv3 Firmware"
<= 6.50\(abvt.0\)
Search vendor "Zyxel" for product "Nwa1123acv3 Firmware" and version " <= 6.50\(abvt.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa1123acv3
Search vendor "Zyxel" for product "Nwa1123acv3"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa210ax Firmware
Search vendor "Zyxel" for product "Nwa210ax Firmware"
<= 6.50\(abtd.2\)
Search vendor "Zyxel" for product "Nwa210ax Firmware" and version " <= 6.50\(abtd.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa210ax
Search vendor "Zyxel" for product "Nwa210ax"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa220ax-6e Firmware
Search vendor "Zyxel" for product "Nwa220ax-6e Firmware"
<= 6.50\(acco.2\)
Search vendor "Zyxel" for product "Nwa220ax-6e Firmware" and version " <= 6.50\(acco.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa220ax-6e
Search vendor "Zyxel" for product "Nwa220ax-6e"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa50ax Firmware
Search vendor "Zyxel" for product "Nwa50ax Firmware"
<= 6.55\(acge.1\)
Search vendor "Zyxel" for product "Nwa50ax Firmware" and version " <= 6.55\(acge.1\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa50ax
Search vendor "Zyxel" for product "Nwa50ax"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa50ax-pro Firmware
Search vendor "Zyxel" for product "Nwa50ax-pro Firmware"
<= 6.50\(acge.0\)
Search vendor "Zyxel" for product "Nwa50ax-pro Firmware" and version " <= 6.50\(acge.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa50ax-pro
Search vendor "Zyxel" for product "Nwa50ax-pro"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa5123-ac Hd Firmware
Search vendor "Zyxel" for product "Nwa5123-ac Hd Firmware"
<= 6.25\(abim.9\)
Search vendor "Zyxel" for product "Nwa5123-ac Hd Firmware" and version " <= 6.25\(abim.9\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa5123-ac Hd
Search vendor "Zyxel" for product "Nwa5123-ac Hd"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa55axe Firmware
Search vendor "Zyxel" for product "Nwa55axe Firmware"
<= 6.29\(abzl.1\)
Search vendor "Zyxel" for product "Nwa55axe Firmware" and version " <= 6.29\(abzl.1\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa55axe
Search vendor "Zyxel" for product "Nwa55axe"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa90ax Firmware
Search vendor "Zyxel" for product "Nwa90ax Firmware"
<= 6.29\(accv.1\)
Search vendor "Zyxel" for product "Nwa90ax Firmware" and version " <= 6.29\(accv.1\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa90ax
Search vendor "Zyxel" for product "Nwa90ax"
--
Safe
Zyxel
Search vendor "Zyxel"
Nwa90ax-pro Firmware
Search vendor "Zyxel" for product "Nwa90ax-pro Firmware"
<= 6.50\(acgf.0\)
Search vendor "Zyxel" for product "Nwa90ax-pro Firmware" and version " <= 6.50\(acgf.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Nwa90ax-pro
Search vendor "Zyxel" for product "Nwa90ax-pro"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac500 Firmware
Search vendor "Zyxel" for product "Wac500 Firmware"
<= 6.50\(abvs.0\)
Search vendor "Zyxel" for product "Wac500 Firmware" and version " <= 6.50\(abvs.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac500
Search vendor "Zyxel" for product "Wac500"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac500h Firmware
Search vendor "Zyxel" for product "Wac500h Firmware"
<= 6.50\(abwa.0\)
Search vendor "Zyxel" for product "Wac500h Firmware" and version " <= 6.50\(abwa.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac500h
Search vendor "Zyxel" for product "Wac500h"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac5302d-sv2 Firmware
Search vendor "Zyxel" for product "Wac5302d-sv2 Firmware"
<= 6.25\(abvz.9\)
Search vendor "Zyxel" for product "Wac5302d-sv2 Firmware" and version " <= 6.25\(abvz.9\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac5302d-sv2
Search vendor "Zyxel" for product "Wac5302d-sv2"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac6103d-i Firmware
Search vendor "Zyxel" for product "Wac6103d-i Firmware"
<= 6.28\(aaxh.0\)
Search vendor "Zyxel" for product "Wac6103d-i Firmware" and version " <= 6.28\(aaxh.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac6103d-i
Search vendor "Zyxel" for product "Wac6103d-i"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac6303d-s Firmware
Search vendor "Zyxel" for product "Wac6303d-s Firmware"
<= 6.25\(abgl.9\)
Search vendor "Zyxel" for product "Wac6303d-s Firmware" and version " <= 6.25\(abgl.9\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac6303d-s
Search vendor "Zyxel" for product "Wac6303d-s"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac6502d-e Firmware
Search vendor "Zyxel" for product "Wac6502d-e Firmware"
<= 6.28\(aasd.0\)
Search vendor "Zyxel" for product "Wac6502d-e Firmware" and version " <= 6.28\(aasd.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac6502d-e
Search vendor "Zyxel" for product "Wac6502d-e"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac6502d-s Firmware
Search vendor "Zyxel" for product "Wac6502d-s Firmware"
<= 6.28\(aase.0\)
Search vendor "Zyxel" for product "Wac6502d-s Firmware" and version " <= 6.28\(aase.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac6502d-s
Search vendor "Zyxel" for product "Wac6502d-s"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac6503d-s Firmware
Search vendor "Zyxel" for product "Wac6503d-s Firmware"
<= 6.28\(aasf.0\)
Search vendor "Zyxel" for product "Wac6503d-s Firmware" and version " <= 6.28\(aasf.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac6503d-s
Search vendor "Zyxel" for product "Wac6503d-s"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac6552d-s Firmware
Search vendor "Zyxel" for product "Wac6552d-s Firmware"
<= 6.28\(abio.0\)
Search vendor "Zyxel" for product "Wac6552d-s Firmware" and version " <= 6.28\(abio.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac6552d-s
Search vendor "Zyxel" for product "Wac6552d-s"
--
Safe
Zyxel
Search vendor "Zyxel"
Wac6553d-e Firmware
Search vendor "Zyxel" for product "Wac6553d-e Firmware"
<= 6.28\(aasg.0\)
Search vendor "Zyxel" for product "Wac6553d-e Firmware" and version " <= 6.28\(aasg.0\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wac6553d-e
Search vendor "Zyxel" for product "Wac6553d-e"
--
Safe
Zyxel
Search vendor "Zyxel"
Wax510d Firmware
Search vendor "Zyxel" for product "Wax510d Firmware"
<= 6.50\(abtf.2\)
Search vendor "Zyxel" for product "Wax510d Firmware" and version " <= 6.50\(abtf.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wax510d
Search vendor "Zyxel" for product "Wax510d"
--
Safe
Zyxel
Search vendor "Zyxel"
Wax610d Firmware
Search vendor "Zyxel" for product "Wax610d Firmware"
<= 6.50\(abte.2\)
Search vendor "Zyxel" for product "Wax610d Firmware" and version " <= 6.50\(abte.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wax610d
Search vendor "Zyxel" for product "Wax610d"
--
Safe
Zyxel
Search vendor "Zyxel"
Wax620d-6e Firmware
Search vendor "Zyxel" for product "Wax620d-6e Firmware"
<= 6.50\(accn.2\)
Search vendor "Zyxel" for product "Wax620d-6e Firmware" and version " <= 6.50\(accn.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wax620d-6e
Search vendor "Zyxel" for product "Wax620d-6e"
--
Safe
Zyxel
Search vendor "Zyxel"
Wax630s Firmware
Search vendor "Zyxel" for product "Wax630s Firmware"
<= 6.50\(abzd.2\)
Search vendor "Zyxel" for product "Wax630s Firmware" and version " <= 6.50\(abzd.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wax630s
Search vendor "Zyxel" for product "Wax630s"
--
Safe
Zyxel
Search vendor "Zyxel"
Wax640s-6e Firmware
Search vendor "Zyxel" for product "Wax640s-6e Firmware"
<= 6.50\(accm.2\)
Search vendor "Zyxel" for product "Wax640s-6e Firmware" and version " <= 6.50\(accm.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wax640s-6e
Search vendor "Zyxel" for product "Wax640s-6e"
--
Safe
Zyxel
Search vendor "Zyxel"
Wax650s Firmware
Search vendor "Zyxel" for product "Wax650s Firmware"
<= 6.50\(abrm.2\)
Search vendor "Zyxel" for product "Wax650s Firmware" and version " <= 6.50\(abrm.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wax650s
Search vendor "Zyxel" for product "Wax650s"
--
Safe
Zyxel
Search vendor "Zyxel"
Wax655e Firmware
Search vendor "Zyxel" for product "Wax655e Firmware"
<= 6.50\(acdo.2\)
Search vendor "Zyxel" for product "Wax655e Firmware" and version " <= 6.50\(acdo.2\)"
-
Affected
in Zyxel
Search vendor "Zyxel"
Wax655e
Search vendor "Zyxel" for product "Wax655e"
--
Safe