Approved changes feed: RSS · Atom

cpe:2.3:a:zyxel:vpn_series_firmware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductVpn Series Firmware (64afd20f-adb0-557f-8f4f-ddb9efc805f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5960 vulnerable 2026-06-08 06:19:45.214161 Details available
MEDIUM (5.5)
An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device.
Published: 2023-11-28T02:05:45.830Z
Updated: 2024-08-02T08:14:25.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5797 vulnerable 2026-06-08 06:19:44.742306 Details available
MEDIUM (5.5)
An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access the administrator’s logs on an affected device.
Published: 2023-11-28T02:00:59.801Z
Updated: 2024-12-02T19:31:49.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5650 vulnerable 2026-06-08 06:19:44.354924 Details available
MEDIUM (5.5)
An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an authenticated local attacker to modify the URL of the registration page in the web GUI of an affected device.
Published: 2023-11-28T01:53:43.502Z
Updated: 2024-08-02T08:07:32.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4398 vulnerable 2026-06-08 06:16:12.276233 Details available
HIGH (7.5)
An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions on an affected device by sending a crafted IKE packet.
Published: 2023-11-28T01:48:28.586Z
Updated: 2024-10-17T17:38:37.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37926 vulnerable 2026-06-08 06:08:16.271346 Details available
MEDIUM (5.5)
A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an authenticated local attacker to cause denial-of-service (DoS) conditions by executing the CLI command to dump system logs on an affected device.
Published: 2023-11-28T01:37:19.483Z
Updated: 2024-08-02T17:23:27.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37925 vulnerable 2026-06-08 06:08:16.228310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35139 vulnerable 2026-06-08 06:06:26.612726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35136 vulnerable 2026-06-08 06:06:26.593074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34141 vulnerable 2026-06-08 06:06:24.645479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34140 vulnerable 2026-06-08 06:06:24.620636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34139 vulnerable 2026-06-08 06:06:24.617891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34138 vulnerable 2026-06-08 06:06:24.580474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33012 vulnerable 2026-06-08 06:04:48.293449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33011 vulnerable 2026-06-08 06:04:48.270889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33010 vulnerable 2026-06-08 06:04:48.251914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33009 vulnerable 2026-06-08 06:04:48.183447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28771 vulnerable 2026-06-08 06:02:35.662478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28767 vulnerable 2026-06-08 06:02:35.580855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27991 vulnerable 2026-06-08 05:57:42.730314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27990 vulnerable 2026-06-08 05:57:42.695149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22918 vulnerable 2026-06-08 05:54:27.390013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22917 vulnerable 2026-06-08 05:54:27.387927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22916 vulnerable 2026-06-08 05:54:27.375680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22915 vulnerable 2026-06-08 05:54:27.369264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22914 vulnerable 2026-06-08 05:54:27.364084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22913 vulnerable 2026-06-08 05:54:27.348354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40603 vulnerable 2026-06-08 05:48:27.673606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38547 vulnerable 2026-06-08 05:47:16.610213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30526 vulnerable 2026-06-08 05:43:38.163725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30525 vulnerable 2026-06-08 05:43:38.141416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2030 vulnerable 2026-06-08 05:42:50.083809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26532 vulnerable 2026-06-08 05:41:52.469564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26531 vulnerable 2026-06-08 05:41:52.366436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0910 vulnerable 2026-06-08 05:39:11.464754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0734 vulnerable 2026-06-08 05:39:10.687472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0342 vulnerable 2026-06-08 05:39:09.810638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35029 vulnerable 2026-06-08 05:32:17.398117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.