CVE-2023-4398

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions on an affected device by sending a crafted IKE packet.

Una vulnerabilidad de desbordamiento de enteros en el código fuente del kit de herramientas QuickSec IPSec utilizado en la función VPN de las versiones de firmware:
serie Zyxel ATP 4.32 a 5.37,
serie USG FLEX 4.50 a 5.37,
serie USG FLEX 50(W) 4.16 a 5.37 ,
serie USG20(W)-VPN 4.16 a 5.37.
Las versiones de firmware de la serie VPN 4.30 a 5.37 podrían permitir que un atacante no autenticado cause condiciones de denegación de servicio (DoS) en un dispositivo afectado mediante el envío de un paquete IKE manipulado.

*Credits: N/A

CVSS Scores

NISTv3.1 7.5

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-08-17 CVE Reserved
2023-11-28 CVE Published
2024-10-17 CVE Updated
2024-10-28 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-190: Integer Overflow or Wraparound

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps	2023-12-04

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.32 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.32 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Atp100 Search vendor "Zyxel" for product "Atp100"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.32 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.32 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Atp100w Search vendor "Zyxel" for product "Atp100w"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.32 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.32 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Atp200 Search vendor "Zyxel" for product "Atp200"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.32 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.32 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Atp500 Search vendor "Zyxel" for product "Atp500"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.32 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.32 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Atp700 Search vendor "Zyxel" for product "Atp700"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.32 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.32 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Atp800 Search vendor "Zyxel" for product "Atp800"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.50 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.50 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Usg Flex 100 Search vendor "Zyxel" for product "Usg Flex 100"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.50 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.50 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Usg Flex 100w Search vendor "Zyxel" for product "Usg Flex 100w"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.50 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.50 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Usg Flex 200 Search vendor "Zyxel" for product "Usg Flex 200"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.50 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.50 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Usg Flex 50 Search vendor "Zyxel" for product "Usg Flex 50"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.50 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.50 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Usg Flex 500 Search vendor "Zyxel" for product "Usg Flex 500"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.50 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.50 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Usg Flex 50w Search vendor "Zyxel" for product "Usg Flex 50w"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.50 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.50 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Usg Flex 700 Search vendor "Zyxel" for product "Usg Flex 700"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.16 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.16 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Usg 20w-vpn Search vendor "Zyxel" for product "Usg 20w-vpn"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.16 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.16 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Vpn50w Search vendor "Zyxel" for product "Vpn50w"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.30 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.30 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Vpn100 Search vendor "Zyxel" for product "Vpn100"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.30 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.30 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Vpn1000 Search vendor "Zyxel" for product "Vpn1000"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.30 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.30 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Vpn300 Search vendor "Zyxel" for product "Vpn300"	-	-	Safe
Zyxel Search vendor "Zyxel"	Zld Search vendor "Zyxel" for product "Zld"	>= 4.30 <= 5.37 Search vendor "Zyxel" for product "Zld" and version " >= 4.30 <= 5.37"	-	Affected	in	Zyxel Search vendor "Zyxel"	Vpn50 Search vendor "Zyxel" for product "Vpn50"	-	-	Safe