Description
Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| ATP series firmware | Zyxel / ATP series firmware | 4.60 through 5.36 Patch 1 | affected |
| USG20(W)-VPN firmware | Zyxel / USG20(W)-VPN firmware | 4.60 through 5.36 Patch 1 | affected |
| USG FLEX 50(W) firmware | Zyxel / USG FLEX 50(W) firmware | 4.60 through 5.36 Patch 1 | affected |
| USG FLEX series firmware | Zyxel / USG FLEX series firmware | 4.60 through 5.36 Patch 1 | affected |
| VPN series firmware | Zyxel / VPN series firmware | 4.60 through 5.36 Patch 1 | affected |
| ZyWALL/USG series firmware | Zyxel / ZyWALL/USG series firmware | 4.60 through 4.73 Patch 1 | affected |