CVE-2023-6399

CVSS V2 None CVSS V3 None

Description

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50(W) series firmware versions from 4.16 through 5.37 Patch 1, USG20(W)-VPN series firmware versions from 4.16 through 5.37 Patch 1, and USG FLEX H series firmware versions from 1.10 through 1.10 Patch 1 could allow an authenticated IPSec VPN user to cause DoS conditions against the “deviceid” daemon by sending a crafted hostname to an affected device if it has the “Device Insight” feature enabled.

Overview

CVE ID
CVE-2023-6399

Assigner
Zyxel

Vulnerability Status
PUBLISHED

Published Version
2024-02-20T01:42:21.027Z

Last Modified Date
2024-02-21T09:20:18.921Z

Weakness Enumerations

CWE	URL
CWE-134	http://cwe.mitre.org/data/definitions/134.html

References

Reference URL	Reference Tags
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps-02-20-2024	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-6399
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6399

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 06:26:45				Added to TrackCVE